Skip to content
OpenAdvisories
High · 7.0 CVE-2026-4786 EUVD-2026-22134GHSA-cccx-m78h-m3xw

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Published Apr 13, 2026 · Updated Aug 13, 2026 · Assigned by PSF

Vendor: Python Software Foundation Product: CPython Package: jython Package: pypy3 Package: pypy3 Package: python-3.10 Package: python-3.11 Package: python-3.12 Package: python-3.13 Package: python-3.14 Package: python2.7 Package: python3 Package: python3 Package: python3.10 Package: python3.11 Package: python3.12 Package: python3.13 Package: python3.14 Package: python3.14 Package: python3.4 Package: python3.5 Package: python3.6 Package: python3.7 Package: python3.8 Package: python3.9 Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.

Affected products

VendorProductAffectedFixed
Python Software Foundation CPython < 3.10.21, 3.11.0 – < 3.11.16, 3.12.0 – < 3.12.14, 3.13.0 – < 3.13.14, 3.14.0a1 – < 3.14.5rc1, 3.15.0a1 – < 3.15.0b1 3.10.21

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pypy3 7.3.22+dfsg-1 —
Debian 14 python3.14 3.14.5-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pypy3 +1 No fix yet —
Ubuntu 26.04 LTS pypy3 No fix yet —
Ubuntu 26.04 LTS python3.14 3.14.4-1ubuntu0.1 USN-8509-1
Ubuntu 25.10 pypy3 +3 No fix yet —
Ubuntu 24.04 LTS pypy3 No fix yet —
Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.15 USN-8509-1
Ubuntu 22.04 LTS pypy3 +1 No fix yet —
Ubuntu 22.04 LTS python3.10 3.10.12-1~22.04.16 USN-8509-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS pypy3 +1 No fix yet —
Ubuntu 18.04 LTS jython No fix yet —
Ubuntu 16.04 LTS jython No fix yet —
Ubuntu Pro 22.04 LTS python2.7 +1 No fix yet —
Ubuntu Pro 20.04 LTS python2.7 +2 No fix yet —
Ubuntu Pro 18.04 LTS python2.7 +3 No fix yet —
Ubuntu Pro 16.04 LTS python2.7 +1 No fix yet —
Ubuntu Pro 14.04 LTS python2.7 +2 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 python3 +8 3.12.12-3.el10_1.3 RHSA-2026:19064, RHSA-2026:10711
RHEL 10 python3.14 +13 3.14.4-2.el10_2 RHSA-2026:28581, RHSA-2026:19019
RHEL 9 python3 +8 3.9.25-3.el9_7.3 RHSA-2026:19216, RHSA-2026:10949
RHEL 9 python3.11 +6 3.11.13-5.3.el9_7 RHSA-2026:19175, RHSA-2026:10774
RHEL 9 python3.12 +6 3.12.12-4.el9_7.3 RHSA-2026:19177, RHSA-2026:10745
RHEL 9 python3.14 +13 3.14.4-2.el9_8 RHSA-2026:28247, RHSA-2026:19176
RHEL 8 python3 +7 3.6.8-76.el8_10 RHSA-2026:11077
RHEL 8 python3.11 +7 3.11.13-7.el8_10 RHSA-2026:11062
RHEL 8 python3.12 +7 3.12.13-2.el8_10 RHSA-2026:10950
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS python3 +8 3.12.9-2.el10_0.9 RHSA-2026:16699
RHEL 9.6 EUS python3 +8 3.9.21-2.el9_6.6 RHSA-2026:19576
RHEL 9.6 EUS python3.11 +6 3.11.11-2.el9_6.7 RHSA-2026:14652
RHEL 9.6 EUS python3.12 +6 3.12.9-1.el9_6.8 RHSA-2026:14656
RHEL 9.4 EUS python3 +8 3.9.18-3.el9_4.13 RHSA-2026:21682
RHEL 9.4 EUS python3.11 +6 3.11.7-1.el9_4.13 RHSA-2026:14653
RHEL 9.4 EUS python3.12 +6 3.12.1-4.el9_4.13 RHSA-2026:17525
RHEL 9.2 E4S python3 +5 3.9.16-1.el9_2.14 RHSA-2026:19570
RHEL 9.2 E4S python3.11 +3 3.11.2-2.el9_2.12 RHSA-2026:13692
RHEL 9.0 E4S python3 +5 3.9.10-4.el9_0.11 RHSA-2026:19571
RHEL 8.8 TUS python3 +7 3.6.8-51.el8_8.15 RHSA-2026:19549
RHEL 8.8 TUS python3.11 +4 3.11.2-2.el8_8.10 RHSA-2026:26187
RHEL 8.8 E4S python3 +7 3.6.8-51.el8_8.15 RHSA-2026:19549
RHEL 8.8 E4S python3.11 +4 3.11.2-2.el8_8.10 RHSA-2026:26187
RHEL 8.6 TUS python3 +7 3.6.8-47.el8_6.13 RHSA-2026:17619
RHEL 8.6 E4S python3 +7 3.6.8-47.el8_6.13 RHSA-2026:17619
RHEL 8.6 AUS python3 +7 3.6.8-47.el8_6.13 RHSA-2026:17619
RHEL 8.4 EUS Long Life python3 +7 3.6.8-39.el8_4.11 RHSA-2026:19590
RHEL 8.4 AUS python3 +7 3.6.8-39.el8_4.11 RHSA-2026:19590
RHEL 7 ELS python +6 2.7.5-94.el7_9.5 RHSA-2026:19589
RHEL 7 ELS python3 +6 3.6.8-21.el7_9.6 RHSA-2026:35838
RHEL 6 ELS python +5 2.6.6-70.el6_10.4 RHSA-2026:22144
Red Hat Hardened Images 1 python3 +15 3.14.4-2.hum1 RHSA-2026:9228
Red Hat Hardened Images 1 python3.11 +6 3.11.15-4.hum1 RHSA-2026:8822
Red Hat Hardened Images 1 python3.12 +6 3.12.13-3.hum1 RHSA-2026:8824
Red Hat Hardened Images 1 python3.13 +8 3.13.13-1.1.hum1 RHSA-2026:10117

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 python-unversioned-command 3.12.12-3.el10_1.3 ALSA-2026:19064, ALSA-2026:10711
AlmaLinux 10 python3 +6 3.12.13-2.el10_2 ALSA-2026:19064
AlmaLinux 10 python3.14 +13 3.14.4-2.el10_2 ALSA-2026:28581, ALSA-2026:19019
AlmaLinux 9 python3 +7 3.9.25-3.el9_7.3 ALSA-2026:19216, ALSA-2026:10949
AlmaLinux 9 python3.11 +6 3.11.13-5.3.el9_7 ALSA-2026:19175, ALSA-2026:10774
AlmaLinux 9 python3.12 +6 3.12.12-4.el9_7.3 ALSA-2026:19177, ALSA-2026:10745
AlmaLinux 9 python3.14 +13 3.14.4-2.el9_8 ALSA-2026:28247, ALSA-2026:19176
AlmaLinux 8 python3-idle +6 3.6.8-76.el8_10.alma.1 ALSA-2026:11077
AlmaLinux 8 python3.11 +7 3.11.13-7.el8_10 ALSA-2026:11062
AlmaLinux 8 python3.12 +7 3.12.13-2.el8_10 ALSA-2026:10950

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 python3.12 3.12.13-2.el10_2 RLSA-2026:19064
Rocky Linux 10 python3.14 3.14.4-2.el10_2 RLSA-2026:28581, RLSA-2026:19019
Rocky Linux 9 python3.11 3.11.13-5.3.el9_7 RLSA-2026:19175, RLSA-2026:10774
Rocky Linux 9 python3.12 3.12.12-4.el9_7.3 RLSA-2026:19177, RLSA-2026:10745
Rocky Linux 9 python3.14 3.14.4-2.el9_8 RLSA-2026:28247, RLSA-2026:19176
Rocky Linux 9 python3.9 3.9.25-3.el9_7.3 RLSA-2026:19216, RLSA-2026:10949
Rocky Linux 8 python3 3.6.8-76.el8_10.rocky.0 RLSA-2026:11077
Rocky Linux 8 python3.11 3.11.13-7.el8_10 RLSA-2026:11062
Rocky Linux 8 python3.12 3.12.13-2.el8_10 RLSA-2026:10950

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python +1 2.7.18-150000.120.1 SUSE-SU-2026:2387-1
SLES 15 SP7 python311-core 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES 15 SP6 python311 +1 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES 15 SP6 python312 +1 3.12.14-150600.3.68.1 SUSE-SU-2026:4534-1
SLES 15 SP5 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLES 15 SP4 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLES 12 SP5 python +2 2.7.18-33.79.1 SUSE-SU-2026:2664-1
SLES 12 SP5 python36 +1 3.6.15-116.1 SUSE-SU-2026:3855-1
Show 20 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 3 python311 +1 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES 3 python313 +1 3.13.13-150700.4.50.1 SUSE-SU-2026:2464-1
SLES for SAP 15 SP6 python311 +1 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES for SAP 15 SP6 python312 +1 3.12.14-150600.3.68.1 SUSE-SU-2026:4534-1
SLES for SAP 15 SP5 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLES for SAP 15 SP4 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLE Micro 6.2 python3 +2 3.13.14-160000.1.1 SUSE-SU-2026:22959-1
SLE Micro 6.1 python311 +1 3.11.15-slfo.1.1_5.1 SUSE-SU-2026:23743-1, SUSE-SU-2026:23191-1
SLE Micro 6.0 python311 +1 3.11.15-5.1 SUSE-SU-2026:23212-1
SLE HPC 15 SP5 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLE HPC 15 SP4 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-80002.4.15.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-80002.3.3.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-80002.5.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-80002.3.9.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-80002.3.9.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-80002.4.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-80002.4.12.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-70002.4.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-70002.5.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-70002.4.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-70002.4.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push 5.2.5-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.2.10-120002.3.15.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.2.7-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-tools 5.2.17-120002.3.18.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 venv-salt-minion 3006.0-120002.5.22.2 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools RES-7 mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools EL-10 scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-9 scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-8 scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-100002.1.9.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-90002.4.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-90002.5.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-90002.3.9.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-90002.3.9.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-90002.4.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-90002.4.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python310 3.10.20-6.1 openSUSE-SU-2026:10647-1
openSUSE Tumbleweed python311 3.11.15-6.1 openSUSE-SU-2026:11068-1
openSUSE Tumbleweed python312 3.12.13-6.1 openSUSE-SU-2026:11100-1
openSUSE Tumbleweed python313 3.13.13-2.1 openSUSE-SU-2026:10667-1
openSUSE Tumbleweed python314 3.14.6-1.1 openSUSE-SU-2026:11181-1
openSUSE Tumbleweed python315 3.15.0~a8-3.1 openSUSE-SU-2026:10648-1
openSUSE Leap 16.0 python3 +5 3.13.14-160000.1.1 openSUSE-SU-2026:21459-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.23 python3 3.12.14-r0 —
Alpine v3.22 python3 3.12.14-r0 —
Alpine v3.21 python3 3.12.14-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3 +7 3.9.25-1.amzn2023.0.5 ALAS2023-2026-1618
Amazon Linux 2023 python3.11 +6 3.11.15-1.amzn2023.0.1 ALAS2023-2026-1620
Amazon Linux 2023 python3.12 +6 3.12.13-2.amzn2023.0.1 ALAS2023-2026-1619
Amazon Linux 2023 python3.13 +8 3.13.13-1.amzn2023.0.2 ALAS2023-2026-1638
Amazon Linux 2023 python3.14 +13 3.14.3-2.amzn2023.0.1 ALAS2023-2026-1617
Amazon Linux 2 python +6 2.7.18-1.amzn2.0.19 ALAS2-2026-3280
Amazon Linux 2 python3 +6 3.7.16-1.amzn2.0.26 ALAS2-2026-3281

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python3 3.12.9-14 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 python3 +7 3.12.12-3.0.1.el10_1.3 ELSA-2026-19064, ELSA-2026-10711
Oracle Linux 10 python3.14 +13 3.14.4-2.el10_2 ELSA-2026-28581, ELSA-2026-19019
Oracle Linux 9 python3 +7 3.9.25-3.0.1.el9_7.3 ELSA-2026-19216, ELSA-2026-10949
Oracle Linux 9 python3.11 +6 3.11.13-5.3.0.1.el9_7 ELSA-2026-19175, ELSA-2026-10774
Oracle Linux 9 python3.12 +6 3.12.12-4.0.1.el9_7.3 ELSA-2026-19177, ELSA-2026-10745
Oracle Linux 9 python3.14 +13 3.14.4-2.el9_8 ELSA-2026-28247, ELSA-2026-19176
Oracle Linux 8 python3-idle +6 3.6.8-76.0.1.el8_10 ELSA-2026-11077
Oracle Linux 8 python3.11 +7 3.11.13-7.0.1.el8_10 ELSA-2026-11062
Oracle Linux 8 python3.12 +7 3.12.13-2.el8_10 ELSA-2026-10950
Oracle Linux 7 python +6 2.7.5-94.0.9.el7_9 ELSA-2026-19589
Oracle Linux 7 python3 +6 3.6.8-21.0.13.el7_9 ELSA-2026-35838

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling python-3.10 3.10.20-r3 —
Wolfi rolling python-3.11 3.11.15-r2 —
Wolfi rolling python-3.12 3.12.14-r2 —
Wolfi rolling python-3.13 3.13.13-r2 —
Wolfi rolling python-3.14 3.14.4-r3 —

Advisories 50

References