Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-4360 EUVD-2026-40336GHSA-gf2w-jqmq-fcm8

Tarfile.extract() doesn't fully respect filter parameter

Published Jun 30, 2026 · Updated Aug 13, 2026 · Assigned by PSF

Vendor: Python Software Foundation Product: CPython Package: pypy3 Package: python-3.10 Package: python-3.11 Package: python-3.12 Package: python-3.13 Package: python-3.14 Package: python-py Package: python3 Package: python3 Package: python3.10 Package: python3.12 Package: python3.13 Package: python3.13 Package: python3.14 Package: python3.14 Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function.

Affected products

VendorProductAffectedFixed
Python Software Foundation CPython < 3.10.21, 3.11.0 – < 3.11.16, 3.12.0 – < 3.12.14, 3.13.0 – < 3.13.15, 3.14.0 – < 3.14.7, 3.15.0a1 – < 3.15.0b4 3.10.21

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pypy3 8.0.0+dfsg-1 —
Debian 14 python3.14 3.14.7-1 —
Debian 13 pypy3 No fix yet —
Debian 13 python3.13 3.13.5-2+deb13u5 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS python3.14 3.14.4-1ubuntu0.2 USN-8744-1
Ubuntu 25.10 python3.13 +1 No fix yet —
Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.17 USN-8744-1
Ubuntu 22.04 LTS python3.10 3.10.12-1~22.04.18 USN-8744-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS python2.7 2.7.18-13ubuntu1.5+esm9 USN-8744-1
Ubuntu Pro 22.04 LTS python3.11 3.11.0~rc1-1~22.04.1+esm2 USN-8744-1
Ubuntu Pro 20.04 LTS python2.7 2.7.18-1~20.04.7+esm10 USN-8744-1
Ubuntu Pro 20.04 LTS python3.8 3.8.10-0ubuntu1~20.04.18+esm7 USN-8744-1
Ubuntu Pro 20.04 LTS python3.9 3.9.5-3ubuntu0~20.04.1+esm11 USN-8744-1
Ubuntu Pro 18.04 LTS python2.7 2.7.17-1~18.04ubuntu1.13+esm15 USN-8744-1
Ubuntu Pro 18.04 LTS python3.6 3.6.9-1~18.04ubuntu1.13+esm10 USN-8744-1
Ubuntu Pro 18.04 LTS python3.7 3.7.5-2ubuntu1~18.04.2+esm11 USN-8744-1
Ubuntu Pro 18.04 LTS python3.8 3.8.0-3ubuntu1~18.04.2+esm11 USN-8744-1
Ubuntu Pro 16.04 LTS python2.7 2.7.12-1ubuntu0~16.04.18+esm22 USN-8744-1
Ubuntu Pro 16.04 LTS python3.5 3.5.2-2ubuntu0~16.04.13+esm25 USN-8744-1
Ubuntu Pro 14.04 LTS python2.7 2.7.6-8ubuntu0.6+esm30 USN-8744-1
Ubuntu Pro 14.04 LTS python3.4 3.4.3-1ubuntu1~14.04.7+esm21 USN-8744-1
Ubuntu Pro 14.04 LTS python3.5 3.5.2-2ubuntu0~16.04.4~14.04.1+esm11 USN-8744-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 python3 +15 3.14.6-2.1.hum1 RHSA-2026:54534, RHSA-2026:47892
Red Hat Hardened Images 1 python3.10 +6 3.10.20-3.1.hum1 RHSA-2026:47896
Red Hat Hardened Images 1 python3.11 +6 3.11.15-5.4.hum1 RHSA-2026:47915
Red Hat Hardened Images 1 python3.12 +6 3.12.13-3.7.hum1 RHSA-2026:47930
Red Hat Hardened Images 1 python3.13 +8 3.13.14-1.6.hum1 RHSA-2026:54554, RHSA-2026:47926

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES 15 SP7 python311-core 3.11.15-150600.3.62.2 SUSE-SU-2026:3560-1
SLES 15 SP6 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES 15 SP6 python311 +1 3.11.15-150600.3.62.2 SUSE-SU-2026:3560-1
SLES 15 SP6 python312 3.12.13-150600.3.62.1 SUSE-SU-2026:4534-1, SUSE-SU-2026:3569-1
SLES 15 SP6 python312-core 3.12.13-150600.3.62.3 SUSE-SU-2026:4534-1, SUSE-SU-2026:3569-1
SLES 15 SP5 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES 15 SP5 python311 +1 3.11.15-150400.9.94.1 SUSE-SU-2026:3548-1
SLES 15 SP5 python311-core 3.11.15-150400.9.94.2 SUSE-SU-2026:3548-1
SLES 15 SP5 python39 +1 3.9.25-150300.4.109.1 SUSE-SU-2026:4174-1
SLES 15 SP4 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES 15 SP4 python310 3.10.20-150400.4.115.1 SUSE-SU-2026:3530-1
SLES 15 SP4 python310-core 3.10.20-150400.4.115.2 SUSE-SU-2026:3530-1
SLES 15 SP4 python311 +1 3.11.15-150400.9.94.1 SUSE-SU-2026:3548-1
SLES 15 SP4 python311-core 3.11.15-150400.9.94.2 SUSE-SU-2026:3548-1
SLES 12 SP5 python3 +1 3.4.10-25.191.2 SUSE-SU-2026:3601-1
SLES 12 SP5 python36 +1 3.6.15-116.1 SUSE-SU-2026:3855-1
Show 25 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 3 python311 +1 3.11.15-150600.3.62.2 SUSE-SU-2026:3560-1
SLES 3 python313 +1 3.13.14-150700.4.53.1 SUSE-SU-2026:3649-1
SLES for SAP 16.0 python313 +2 3.13.14-160000.2.1 SUSE-SU-2026:23303-1
SLES for SAP 15 SP6 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES for SAP 15 SP6 python311 +1 3.11.15-150600.3.62.2 SUSE-SU-2026:3560-1
SLES for SAP 15 SP6 python312 3.12.13-150600.3.62.1 SUSE-SU-2026:4534-1, SUSE-SU-2026:3569-1
SLES for SAP 15 SP6 python312-core 3.12.13-150600.3.62.3 SUSE-SU-2026:4534-1, SUSE-SU-2026:3569-1
SLES for SAP 15 SP5 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES for SAP 15 SP5 python311 +1 3.11.15-150400.9.94.1 SUSE-SU-2026:3548-1
SLES for SAP 15 SP5 python311-core 3.11.15-150400.9.94.2 SUSE-SU-2026:3548-1
SLES for SAP 15 SP5 python39 +1 3.9.25-150300.4.109.1 SUSE-SU-2026:4174-1
SLES for SAP 15 SP4 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLES for SAP 15 SP4 python310 3.10.20-150400.4.115.1 SUSE-SU-2026:3530-1
SLES for SAP 15 SP4 python310-core 3.10.20-150400.4.115.2 SUSE-SU-2026:3530-1
SLES for SAP 15 SP4 python311 +1 3.11.15-150400.9.94.1 SUSE-SU-2026:3548-1
SLES for SAP 15 SP4 python311-core 3.11.15-150400.9.94.2 SUSE-SU-2026:3548-1
SLES 16.0 python313 +2 3.13.14-160000.2.1 SUSE-SU-2026:23303-1
SLE Micro 6.2 python313 +1 3.13.14-160000.2.1 SUSE-SU-2026:23159-1
SLE Micro 6.1 python311 +1 3.11.15-slfo.1.1_5.1 SUSE-SU-2026:23743-1, SUSE-SU-2026:23191-1
SLE Micro 6.0 python311 +1 3.11.15-5.1 SUSE-SU-2026:23212-1
SLE Micro 5.5 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLE Micro 5.4 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLE Micro 5.3 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLE HPC 15 SP5 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLE HPC 15 SP5 python311 +1 3.11.15-150400.9.94.1 SUSE-SU-2026:3548-1
SLE HPC 15 SP5 python311-core 3.11.15-150400.9.94.2 SUSE-SU-2026:3548-1
SLE HPC 15 SP4 python3 +1 3.6.15-150300.10.129.1 SUSE-SU-2026:4754-1
SLE HPC 15 SP4 python310 3.10.20-150400.4.115.1 SUSE-SU-2026:3530-1
SLE HPC 15 SP4 python310-core 3.10.20-150400.4.115.2 SUSE-SU-2026:3530-1
SLE HPC 15 SP4 python311 +1 3.11.15-150400.9.94.1 SUSE-SU-2026:3548-1
SLE HPC 15 SP4 python311-core 3.11.15-150400.9.94.2 SUSE-SU-2026:3548-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-80002.4.15.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-80002.3.3.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-80002.5.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-80002.3.9.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-80002.3.9.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-80002.4.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-80002.4.12.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-70002.4.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-70002.5.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-70002.4.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-70002.4.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push 5.2.5-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.2.10-120002.3.15.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.2.7-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-tools 5.2.17-120002.3.18.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 venv-salt-minion 3006.0-120002.5.22.2 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools RES-7 mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools EL-10 scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-9 scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-8 scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-100002.1.9.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-90002.4.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-90002.5.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-90002.3.9.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-90002.3.9.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-90002.4.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-90002.4.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python310 3.10.20-8.1 openSUSE-SU-2026:11426-1
openSUSE Tumbleweed python311 3.11.15-8.1 openSUSE-SU-2026:11427-1
openSUSE Tumbleweed python312 3.12.13-8.1 openSUSE-SU-2026:11428-1
openSUSE Tumbleweed python313 3.13.14-2.1 openSUSE-SU-2026:11534-1
openSUSE Tumbleweed python314 3.14.7-1.1 openSUSE-SU-2026:11597-1
openSUSE Tumbleweed python315 3.15.0~b4-1.1 openSUSE-SU-2026:11429-1
openSUSE Leap 16.0 python313 +4 3.13.14-160000.2.1 openSUSE-SU-2026:21595-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 python3 3.14.7-r0 —
Alpine v3.23 python3 3.12.14-r0 —
Alpine v3.22 python3 3.12.14-r0 —
Alpine v3.21 python3 3.12.14-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3 +7 3.9.25-1.amzn2023.0.9 ALAS2023-2026-1995
Amazon Linux 2023 python3.11 +6 3.11.15-1.amzn2023.0.5 ALAS2023-2026-1998
Amazon Linux 2023 python3.12 +6 3.12.13-2.amzn2023.0.5 ALAS2023-2026-1996
Amazon Linux 2023 python3.13 +8 3.13.14-1.amzn2023.0.3 ALAS2023-2026-1997
Amazon Linux 2023 python3.14 +13 3.14.6-1.amzn2023.0.3 ALAS2023-2026-1999

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-py No fix yet —
Azure Linux 3 python3 3.12.9-14 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling python-3.10 3.10.20-r10 —
Wolfi rolling python-3.11 3.11.15-r8 —
Wolfi rolling python-3.12 3.12.13-r10 —
Wolfi rolling python-3.13 3.13.14-r2 —
Wolfi rolling python-3.14 3.14.6-r3 —

Advisories 41

References