Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-13836 EUVD-2025-200070GHSA-399h-rrqc-rpgv

Excessive read buffering DoS in http.client

Published Dec 1, 2025 · Updated Mar 3, 2026 · Assigned by PSF

Vendor: Python Software Foundation Product: CPython Package: pypy3 Package: python-3.10 Package: python-3.11 Package: python-3.12 Package: python-3.13 Package: python-py Package: python3 Package: python3.10 Package: python3.11 Package: python3.11 Package: python3.12 Package: python3.13 Package: python3.13 Package: python3.14 Package: python3.14 Package: python3.8 Package: python3.9 Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.

Affected products

VendorProductAffectedFixed
Python Software Foundation CPython < 3.10.20, 3.11.0 – < 3.11.15, 3.12.0 – < 3.12.13, 3.13.0 – < 3.13.11, 3.14.0 – < 3.14.1, 3.15.0a1 – < 3.15.0a3 3.10.20

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pypy3 7.3.21+dfsg-1 —
Debian 14 python3.14 3.14.2-1 —
Debian 13 pypy3 No fix yet —
Debian 13 python3.13 3.13.5-2+deb13u1 —
Debian 12 pypy3 No fix yet —
Debian 12 python3.11 3.11.2-6+deb12u7 —
Debian 11 python3.9 3.9.2-1+deb11u4 DLA-4445-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 25.10 python3.13 3.13.7-1ubuntu0.2 USN-7951-1
Ubuntu 25.10 python3.14 3.14.0-1ubuntu0.1 USN-7951-1
Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.10 USN-7951-1
Ubuntu 22.04 LTS python3.10 3.10.12-1~22.04.13 USN-7951-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS python3.11 3.11.0~rc1-1~22.04.1~esm7 USN-7951-1
Ubuntu Pro 20.04 LTS python3.8 3.8.10-0ubuntu1~20.04.18+esm4 USN-7951-1
Ubuntu Pro 20.04 LTS python3.9 3.9.5-3ubuntu0~20.04.1+esm8 USN-7951-1
Ubuntu Pro 18.04 LTS python3.8 3.8.0-3ubuntu1~18.04.2+esm8 USN-7951-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 python3 +8 3.12.12-3.el10_1 RHSA-2026:1828
RHEL 9 python3.11 +6 3.11.13-5.el9_7 RHSA-2026:1410
RHEL 9 python3.12 +6 3.12.12-4.el9_7 RHSA-2026:1408
RHEL 8 python3.11 +7 3.11.13-4.el8_10 RHSA-2026:1374
RHEL 8 python3.12 +7 3.12.12-2.el8_10 RHSA-2026:2419
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS python3 +8 3.12.9-2.el10_0.6 RHSA-2026:2233
RHEL 9.6 EUS python3.11 +6 3.11.11-2.el9_6.4 RHSA-2026:1892
RHEL 9.6 EUS python3.12 +6 3.12.9-1.el9_6.5 RHSA-2026:3900
RHEL 9.4 EUS python3.11 +6 3.11.7-1.el9_4.10 RHSA-2026:1893
RHEL 9.4 EUS python3.12 +6 3.12.1-4.el9_4.10 RHSA-2026:3897
RHEL 9.2 E4S python3.11 +3 3.11.2-2.el9_2.9 RHSA-2026:1922
RHEL 8.8 TUS python3.11 +4 3.11.2-2.el8_8.7 RHSA-2026:2084
RHEL 8.8 E4S python3.11 +4 3.11.2-2.el8_8.7 RHSA-2026:2084
Red Hat Hardened Images 1 python3 +15 3.14.4-1.hum1 RHSA-2026:7661
Red Hat Hardened Images 1 python3.11 +6 3.11.15-4.hum1 RHSA-2026:8822
Red Hat Hardened Images 1 python3.12 +6 3.12.13-3.hum1 RHSA-2026:8824
Red Hat Hardened Images 1 python3.13 +8 3.13.13-1.hum1 RHSA-2026:7443

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 python-unversioned-command 3.12.12-3.el10_1 ALSA-2026:1828
AlmaLinux 9 python3.11 +6 3.11.13-5.el9_7 ALSA-2026:1410
AlmaLinux 9 python3.12 +6 3.12.12-4.el9_7 ALSA-2026:1408
AlmaLinux 8 python3.11 +7 3.11.13-4.el8_10 ALSA-2026:1374
AlmaLinux 8 python3.12 +7 3.12.12-2.el8_10 ALSA-2026:2419

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 python3.12 3.12.12-3.el10_1 RLSA-2026:1828
Rocky Linux 9 python3.11 3.11.13-5.el9_7 RLSA-2026:1410
Rocky Linux 9 python3.12 3.12.12-4.el9_7 RLSA-2026:1408
Rocky Linux 8 python3.11 3.11.13-4.el8_10 RLSA-2026:1374
Rocky Linux 8 python3.12 3.12.12-2.el8_10 RLSA-2026:2419

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python +1 2.7.18-150000.94.1 SUSE-SU-2026:0268-1
SLES 15 SP7 python3 +1 3.6.15-150300.10.103.1 SUSE-SU-2026:0027-1
SLES 15 SP7 python311-core 3.11.14-150600.3.41.2 SUSE-SU-2026:1349-1, SUSE-SU-2026:0314-1
SLES 15 SP7 salt 3006.0-150700.14.16.1 SUSE-SU-2026:1030-1
SLES 15 SP6 python311 +1 3.11.15-150600.3.53.1 SUSE-SU-2026:1349-1
SLES 15 SP6 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
SLES 15 SP5 python311 +2 3.11.14-150400.9.72.1 SUSE-SU-2026:1117-1, SUSE-SU-2026:0299-1
SLES 15 SP5 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
SLES 15 SP4 python311 +2 3.11.14-150400.9.72.1 SUSE-SU-2026:1117-1, SUSE-SU-2026:0299-1
SLES 15 SP4 salt 3006.0-150400.8.94.2 SUSE-SU-2026:1028-1
SLES 12 SP5 python +2 2.7.18-33.56.1 SUSE-SU-2026:0133-1
SLES 12 SP5 python3 +1 3.4.10-25.166.1 SUSE-SU-2025:4538-1
SLES 12 SP5 python36 +1 3.6.15-97.1 SUSE-SU-2025:4539-1
Show 31 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 3 python311 +1 3.11.14-150600.3.41.2 SUSE-SU-2026:1349-1, SUSE-SU-2026:0314-1
SLES 3 python313 +1 3.13.11-150700.4.36.1 SUSE-SU-2026:0024-1
SLES for SAP 16.0 python313 +2 3.13.11-160000.1.1 SUSE-SU-2026:20125-1
SLES for SAP 15 SP6 python311 +1 3.11.15-150600.3.53.1 SUSE-SU-2026:1349-1
SLES for SAP 15 SP6 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
SLES for SAP 15 SP5 python311 +2 3.11.14-150400.9.72.1 SUSE-SU-2026:1117-1, SUSE-SU-2026:0299-1
SLES for SAP 15 SP5 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
SLES for SAP 15 SP4 python311 +2 3.11.14-150400.9.72.1 SUSE-SU-2026:1117-1, SUSE-SU-2026:0299-1
SLES for SAP 15 SP4 salt 3006.0-150400.8.94.2 SUSE-SU-2026:1028-1
SLES 16.0 python313 +2 3.13.11-160000.1.1 SUSE-SU-2026:20125-1
SLE Micro 6.2 python313 +1 3.13.11-160000.1.1 SUSE-SU-2026:20154-1
SLE Micro 6.1 python311 +1 3.11.14-slfo.1.1_2.1 SUSE-SU-2026:20768-1, SUSE-SU-2026:20374-1
SLE Micro 6.1 salt 3006.0-slfo.1.1_6.1 SUSE-SU-2026:20825-1
SLE Micro 6.0 python311 +1 3.11.14-2.1 SUSE-SU-2026:20796-1, SUSE-SU-2026:20047-1
SLE Micro 6.0 salt 3006.0-15.1 SUSE-SU-2026:20820-1
SLE Micro 5.5 python3 +1 3.6.15-150300.10.103.1 SUSE-SU-2026:0027-1
SLE Micro 5.5 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
SLE Micro 5.4 python3 +1 3.6.15-150300.10.103.1 SUSE-SU-2026:0027-1
SLE Micro 5.4 salt 3006.0-150400.8.94.2 SUSE-SU-2026:1028-1
SLE Micro 5.3 python3 +1 3.6.15-150300.10.103.1 SUSE-SU-2026:0027-1
SLE Micro 5.3 salt 3006.0-150400.8.94.2 SUSE-SU-2026:1028-1
SLE Micro 5.2 python3 +1 3.6.15-150300.10.103.1 SUSE-SU-2026:0027-1
SLE Micro 5.2 salt 3006.0-150300.53.104.1 SUSE-SU-2026:1027-1
SLE HPC 15 SP5 python311 +2 3.11.14-150400.9.72.1 SUSE-SU-2026:1117-1, SUSE-SU-2026:0299-1
SLE HPC 15 SP5 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
SLE HPC 15 SP4 python311 +2 3.11.14-150400.9.72.1 SUSE-SU-2026:1117-1, SUSE-SU-2026:0299-1
SLE HPC 15 SP4 salt 3006.0-150400.8.94.2 SUSE-SU-2026:1028-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-80002.4.15.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-80002.3.3.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-80002.5.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-80002.3.9.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-80002.3.9.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-80002.4.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-80002.4.12.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-70002.4.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-70002.5.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-70002.4.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-70002.4.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push 5.2.5-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.2.10-120002.3.15.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.2.7-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-tools 5.2.17-120002.3.18.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 venv-salt-minion 3006.0-120002.5.22.2 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools RES-7 mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools EL-10 scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-9 scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-8 scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE Manager Client Tools for SLE Micro 5 venv-salt-minion 3006.0-150000.3.86.1 SUSE-SU-2026:1014-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 venv-salt-minion 3006.0-1.67.1 SUSE-SU-2026:1026-1, SUSE-EL-9-CLIENT-TOOLS-2026-1026
SUSE Manager Client Tools 15 venv-salt-minion 3006.0-150000.3.86.1 SUSE-SU-2026:1014-1
SUSE Manager Client Tools 12 venv-salt-minion 3006.0-3.84.1 SUSE-SU-2026:1012-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-100002.1.9.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy +1 3.11.13-1.38.1 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-m2crypto 0.45.1-1.18.2 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-passlib +1 1.7.4-1.9.2 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-pyasn1 0.5.0-1.12.1 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-pyzmq 25.1.2-1.17.2 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-simplejson 3.19.1-1.12.2 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-tornado 6.3.2-1.18.2 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-websocket-client 1.5.1-1.12.2 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:SaltBundle:Update venv-salt-minion 3006.0-1.67.1 SUSE-SU-2026:1026-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-90002.4.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-90002.5.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-90002.3.9.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-90002.3.9.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-90002.4.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-90002.4.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python310 3.10.19-3.1 openSUSE-SU-2025:15839-1
openSUSE Tumbleweed python311 3.11.14-3.1 openSUSE-SU-2025:15849-1
openSUSE Tumbleweed python312 3.12.12-4.1 openSUSE-SU-2025:15850-1
openSUSE Tumbleweed python313 3.13.11-1.1 openSUSE-SU-2025:15851-1
openSUSE Tumbleweed python314 3.14.2-1.1 openSUSE-SU-2026:10011-1
openSUSE Tumbleweed python315 3.15.0~a3-1.1 openSUSE-SU-2025:15840-1
openSUSE Tumbleweed python39 3.9.25-2.1 openSUSE-SU-2025:15846-1
openSUSE Tumbleweed salt 3006.0-56.1 openSUSE-SU-2026:10389-1
openSUSE Leap 16.0 python313 +4 3.13.11-160000.1.1 openSUSE-SU-2026:20081-1
openSUSE Leap 16.0 salt +1 3006.0-160000.4.1 openSUSE-SU-2026:20412-1
openSUSE Leap 15.6 python +2 2.7.18-150000.94.1 SUSE-SU-2026:0268-1
openSUSE Leap 15.6 python3 +2 3.6.15-150300.10.103.1 SUSE-SU-2026:0027-1
openSUSE Leap 15.6 python310 +2 3.10.19-150400.4.94.1 SUSE-SU-2026:0130-1
openSUSE Leap 15.6 python311 +1 3.11.14-150600.3.41.2 SUSE-SU-2026:1349-1, SUSE-SU-2026:0314-1
openSUSE Leap 15.6 python311-documentation 3.11.14-150600.3.41.1 SUSE-SU-2026:1349-1, SUSE-SU-2026:0314-1
openSUSE Leap 15.6 python312 +2 3.12.12-150600.3.40.1 SUSE-SU-2026:0025-1
openSUSE Leap 15.6 python39 +2 3.9.25-150300.4.90.1 SUSE-SU-2025:4522-1
openSUSE Leap 15.6 salt 3006.0-150500.4.68.2 SUSE-SU-2026:1029-1
openSUSE Leap 15.6 salt-test 3006.0-150500.4.68.1 SUSE-SU-2026:1029-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3.11 +6 3.11.14-1.amzn2023.0.3 ALAS2023-2025-1356
Amazon Linux 2023 python3.12 +6 3.12.12-2.amzn2023.0.3 ALAS2023-2025-1344
Amazon Linux 2023 python3.13 +8 3.13.11-1.amzn2023.0.1 ALAS2023-2025-1343

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-py No fix yet —
Azure Linux 3 python3 3.12.9-7 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 python3 +7 3.12.12-3.0.1.el10_1 ELSA-2026-1828
Oracle Linux 9 python3.11 +6 3.11.13-5.0.1.el9_7 ELSA-2026-1410
Oracle Linux 9 python3.12 +6 3.12.12-4.0.1.el9_7 ELSA-2026-1408
Oracle Linux 8 python3.11 +7 3.11.13-4.0.1.el8_10 ELSA-2026-1374
Oracle Linux 8 python3.12 +7 3.12.12-2.el8_10 ELSA-2026-2419

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling python-3.10 3.10.19-r4 —
Wolfi rolling python-3.11 3.11.14-r5 —
Wolfi rolling python-3.12 3.12.12-r4 —
Wolfi rolling python-3.13 3.13.11-r2 —

Advisories 50

References