Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-6100 EUVD-2026-22028

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

Published Apr 13, 2026 · Updated Aug 13, 2026 · Assigned by PSF

Vendor: Python Software Foundation Product: CPython Package: pypy3 Package: python-3.10 Package: python-3.11 Package: python-3.12 Package: python-3.13 Package: python-3.14 Package: python2.7 Package: python3 Package: python3 Package: python3.10 Package: python3.11 Package: python3.11 Package: python3.12 Package: python3.13 Package: python3.13 Package: python3.14 Package: python3.14 Package: python3.4 Package: python3.5 Package: python3.6 Package: python3.7 Package: python3.8 Package: python3.9 Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.

The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.

Affected products

VendorProductAffectedFixed
Python Software Foundation CPython < 3.10.21, 3.11.0 – < 3.11.16, 3.12.0 – < 3.12.14, 3.13.0 – < 3.13.14, 3.14.0a1 – < 3.14.5rc1, 3.15.0a1 – < 3.15.0b1 3.10.21

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 python3.14 3.14.5~rc1-1 —
Debian 13 python3.13 3.13.5-2+deb13u2 —
Debian 12 python3.11 3.11.2-6+deb12u8 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pypy3 No fix yet —
Ubuntu 26.04 LTS pypy3 No fix yet —
Ubuntu 26.04 LTS python3.14 3.14.4-1ubuntu0.1 USN-8509-1
Ubuntu 25.10 pypy3 +2 No fix yet —
Ubuntu 24.04 LTS pypy3 No fix yet —
Ubuntu 24.04 LTS python3.12 3.12.3-1ubuntu0.15 USN-8509-1
Ubuntu 22.04 LTS python3.10 3.10.12-1~22.04.16 USN-8509-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS pypy3 No fix yet —
Ubuntu Pro 22.04 LTS python2.7 +1 No fix yet —
Ubuntu Pro 20.04 LTS python2.7 +2 No fix yet —
Ubuntu Pro 18.04 LTS python2.7 +3 No fix yet —
Ubuntu Pro 16.04 LTS python2.7 +1 No fix yet —
Ubuntu Pro 14.04 LTS python2.7 +2 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 python3 +8 3.12.12-3.el10_1.3 RHSA-2026:19064, RHSA-2026:10711
RHEL 10 python3.14 +13 3.14.4-2.el10_2 RHSA-2026:19019
RHEL 9 python3 +8 3.9.25-3.el9_7.3 RHSA-2026:19216, RHSA-2026:10949
RHEL 9 python3.11 +6 3.11.13-5.3.el9_7 RHSA-2026:19175, RHSA-2026:10774
RHEL 9 python3.12 +6 3.12.12-4.el9_7.3 RHSA-2026:19177, RHSA-2026:10745
RHEL 9 python3.14 +13 3.14.4-2.el9_8 RHSA-2026:19176
RHEL 8 python3 +7 3.6.8-76.el8_10 RHSA-2026:11077
RHEL 8 python3.11 +7 3.11.13-7.el8_10 RHSA-2026:11062
RHEL 8 python3.12 +7 3.12.13-2.el8_10 RHSA-2026:10950
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS python3 +8 3.12.9-2.el10_0.9 RHSA-2026:16699
RHEL 9.6 EUS python3 +8 3.9.21-2.el9_6.6 RHSA-2026:19576
RHEL 9.6 EUS python3.11 +6 3.11.11-2.el9_6.7 RHSA-2026:14652
RHEL 9.6 EUS python3.12 +6 3.12.9-1.el9_6.8 RHSA-2026:14656
RHEL 9.4 EUS python3 +8 3.9.18-3.el9_4.13 RHSA-2026:21682
RHEL 9.4 EUS python3.11 +6 3.11.7-1.el9_4.13 RHSA-2026:14653
RHEL 9.4 EUS python3.12 +6 3.12.1-4.el9_4.13 RHSA-2026:17525
RHEL 9.2 E4S python3 +5 3.9.16-1.el9_2.14 RHSA-2026:19570
RHEL 9.2 E4S python3.11 +3 3.11.2-2.el9_2.12 RHSA-2026:13692
RHEL 9.0 E4S python3 +5 3.9.10-4.el9_0.11 RHSA-2026:19571
RHEL 8.8 TUS python3 +7 3.6.8-51.el8_8.15 RHSA-2026:19549
RHEL 8.8 TUS python3.11 +4 3.11.2-2.el8_8.10 RHSA-2026:26187
RHEL 8.8 E4S python3 +7 3.6.8-51.el8_8.15 RHSA-2026:19549
RHEL 8.8 E4S python3.11 +4 3.11.2-2.el8_8.10 RHSA-2026:26187
RHEL 8.6 TUS python3 +7 3.6.8-47.el8_6.13 RHSA-2026:17619
RHEL 8.6 E4S python3 +7 3.6.8-47.el8_6.13 RHSA-2026:17619
RHEL 8.6 AUS python3 +7 3.6.8-47.el8_6.13 RHSA-2026:17619
RHEL 8.4 EUS Long Life python3 +7 3.6.8-39.el8_4.11 RHSA-2026:19590
RHEL 8.4 AUS python3 +7 3.6.8-39.el8_4.11 RHSA-2026:19590
RHEL 7 ELS python3 +6 3.6.8-21.el7_9.7 RHSA-2026:52400
Red Hat Hardened Images 1 python3 +15 3.14.4-2.hum1 RHSA-2026:9228
Red Hat Hardened Images 1 python3.11 +6 3.11.15-4.hum1 RHSA-2026:8822
Red Hat Hardened Images 1 python3.12 +6 3.12.13-3.hum1 RHSA-2026:8824
Red Hat Hardened Images 1 python3.13 +8 3.13.13-1.1.hum1 RHSA-2026:10117

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 python-unversioned-command 3.12.12-3.el10_1.3 ALSA-2026:19064, ALSA-2026:10711
AlmaLinux 10 python3 +6 3.12.13-2.el10_2 ALSA-2026:19064
AlmaLinux 10 python3.14 +13 3.14.4-2.el10_2 ALSA-2026:19019
AlmaLinux 9 python3 +7 3.9.25-3.el9_7.3 ALSA-2026:19216, ALSA-2026:10949
AlmaLinux 9 python3.11 +6 3.11.13-5.3.el9_7 ALSA-2026:19175, ALSA-2026:10774
AlmaLinux 9 python3.12 +6 3.12.12-4.el9_7.3 ALSA-2026:19177, ALSA-2026:10745
AlmaLinux 9 python3.14 +13 3.14.4-2.el9_8 ALSA-2026:19176
AlmaLinux 8 python3-idle +6 3.6.8-76.el8_10.alma.1 ALSA-2026:11077
AlmaLinux 8 python3.11 +7 3.11.13-7.el8_10 ALSA-2026:11062
AlmaLinux 8 python3.12 +7 3.12.13-2.el8_10 ALSA-2026:10950

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 python3.12 3.12.13-2.el10_2 RLSA-2026:19064
Rocky Linux 10 python3.14 3.14.4-2.el10_2 RLSA-2026:19019
Rocky Linux 9 python3.11 3.11.13-5.3.el9_7 RLSA-2026:19175, RLSA-2026:10774
Rocky Linux 9 python3.12 3.12.12-4.el9_7.3 RLSA-2026:19177, RLSA-2026:10745
Rocky Linux 9 python3.14 3.14.4-2.el9_8 RLSA-2026:19176
Rocky Linux 9 python3.9 3.9.25-3.el9_7.3 RLSA-2026:19216, RLSA-2026:10949
Rocky Linux 8 python3 3.6.8-76.el8_10.rocky.0 RLSA-2026:11077
Rocky Linux 8 python3.11 3.11.13-7.el8_10 RLSA-2026:11062
Rocky Linux 8 python3.12 3.12.13-2.el8_10 RLSA-2026:10950

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 python +1 2.7.18-150000.120.1 SUSE-SU-2026:2387-1
SLES 15 SP7 python311-core 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES 15 SP6 python311 +1 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES 15 SP6 python312 +1 3.12.14-150600.3.68.1 SUSE-SU-2026:4534-1
SLES 15 SP5 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLES 15 SP4 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLES 12 SP5 python +2 2.7.18-33.79.1 SUSE-SU-2026:2664-1
SLES 12 SP5 python36 +1 3.6.15-116.1 SUSE-SU-2026:3855-1
Show 20 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 3 python311 +1 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES 3 python313 +1 3.13.13-150700.4.50.1 SUSE-SU-2026:2464-1
SLES for SAP 15 SP6 python311 +1 3.11.15-150600.3.59.3 SUSE-SU-2026:3104-1
SLES for SAP 15 SP6 python312 +1 3.12.14-150600.3.68.1 SUSE-SU-2026:4534-1
SLES for SAP 15 SP5 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLES for SAP 15 SP4 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLE Micro 6.2 python3 +2 3.13.14-160000.1.1 SUSE-SU-2026:22959-1
SLE Micro 6.1 python311 +1 3.11.15-slfo.1.1_5.1 SUSE-SU-2026:23743-1, SUSE-SU-2026:23191-1
SLE Micro 6.0 python311 +1 3.11.15-5.1 SUSE-SU-2026:23212-1
SLE HPC 15 SP5 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SLE HPC 15 SP4 python311 +2 3.11.15-150400.9.91.1 SUSE-SU-2026:3132-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-80002.4.15.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-80002.3.3.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-80002.3.6.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-80002.3.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-80002.5.3.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-80002.3.9.5 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-80002.3.3.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-80002.3.9.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-80002.4.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-80002.4.12.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-80002.3.6.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-70002.4.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-70002.3.6.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-70002.3.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-70002.5.3.2 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-70002.3.3.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-70002.3.9.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-70002.4.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-70002.4.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-70002.3.6.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push 5.2.5-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.2.10-120002.3.15.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.2.7-120002.3.12.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-tools 5.2.17-120002.3.18.1 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools SLE-12 venv-salt-minion 3006.0-120002.5.22.2 SUSE-SU-2026:4584-1
SUSE Multi Linux Manager Tools RES-7 mgr-push 5.2.5-70002.3.12.2 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacecmd 5.2.10-70002.3.15.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 spacewalk-client-tools 5.2.7-70002.3.12.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools RES-7 venv-salt-minion 3006.0-70002.5.22.1 SUSE-SU-2026:4583-1
SUSE Multi Linux Manager Tools EL-10 scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-10 venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE Multi Linux Manager Tools EL-9 scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-9 venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1
SUSE Multi Linux Manager Tools EL-8 scap-security-guide 0.1.80-80002.3.12.4 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 spacecmd 5.2.10-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 uyuni-tools 5.2.17-80002.3.15.3 SUSE-SU-2026:4581-1
SUSE Multi Linux Manager Tools EL-8 venv-salt-minion 3006.0-80002.5.22.3 SUSE-SU-2026:4581-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-100002.1.6.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-100002.1.9.2 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-100002.1.6.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-100002.1.9.1 SUSE-SU-2026:4580-1
SUSE EL-10:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-100002.1.13.1 SUSE-SU-2026:4580-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-90002.4.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cffi 1.17.1-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cryptography 3.3.2-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-cssselect 1.3.0-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-editables 0.5-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-exceptiongroup +1 1.2.2-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-flit-core 3.12.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-fancy-pypi-readme +1 25.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatch-vcs +1 0.5.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-hatchling 1.31.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-idna 3.10-90002.3.6.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig 2.1.0-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-iniconfig-test 2.1.0-90002.3.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-jinja2 3.1.6-90002.5.3.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.1.1-90002.3.9.2 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-packaging 24.2-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pip 25.0.1-90002.3.3.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1 0.6.3-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyasn1-modules 0.4.2-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-90002.3.9.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyparsing 3.0.9-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.34.2-90002.4.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-90002.4.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-websocket-client 1.9.0-90002.3.6.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.80-90002.3.12.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.10-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.17-90002.3.15.1 SUSE-SU-2026:4582-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-90002.5.22.1 SUSE-SU-2026:4582-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python310 3.10.20-6.1 openSUSE-SU-2026:10647-1
openSUSE Tumbleweed python311 3.11.15-6.1 openSUSE-SU-2026:11068-1
openSUSE Tumbleweed python312 3.12.13-6.1 openSUSE-SU-2026:11100-1
openSUSE Tumbleweed python313 3.13.13-2.1 openSUSE-SU-2026:10667-1
openSUSE Tumbleweed python314 3.14.6-1.1 openSUSE-SU-2026:11181-1
openSUSE Tumbleweed python315 3.15.0~a8-3.1 openSUSE-SU-2026:10648-1
openSUSE Leap 16.0 python3 +5 3.13.14-160000.1.1 openSUSE-SU-2026:21459-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.23 python3 3.12.14-r0 —
Alpine v3.22 python3 3.12.14-r0 —
Alpine v3.21 python3 3.12.14-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3 +7 3.9.25-1.amzn2023.0.5 ALAS2023-2026-1618
Amazon Linux 2023 python3.11 +6 3.11.15-1.amzn2023.0.1 ALAS2023-2026-1620
Amazon Linux 2023 python3.12 +6 3.12.13-2.amzn2023.0.1 ALAS2023-2026-1619
Amazon Linux 2023 python3.13 +8 3.13.13-1.amzn2023.0.2 ALAS2023-2026-1638
Amazon Linux 2023 python3.14 +13 3.14.3-2.amzn2023.0.1 ALAS2023-2026-1617
Amazon Linux 2 python +6 2.7.18-1.amzn2.0.19 ALAS2-2026-3280
Amazon Linux 2 python3 +6 3.7.16-1.amzn2.0.26 ALAS2-2026-3281

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python3 3.12.9-14 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 python3 +7 3.12.12-3.0.1.el10_1.3 ELSA-2026-19064, ELSA-2026-10711
Oracle Linux 10 python3.14 +13 3.14.4-2.el10_2 ELSA-2026-19019
Oracle Linux 9 python3 +7 3.9.25-3.0.1.el9_7.3 ELSA-2026-19216, ELSA-2026-10949
Oracle Linux 9 python3.11 +6 3.11.13-5.3.0.1.el9_7 ELSA-2026-19175, ELSA-2026-10774
Oracle Linux 9 python3.12 +6 3.12.12-4.0.1.el9_7.3 ELSA-2026-19177, ELSA-2026-10745
Oracle Linux 9 python3.14 +13 3.14.4-2.el9_8 ELSA-2026-19176
Oracle Linux 8 python3-idle +6 3.6.8-76.0.1.el8_10 ELSA-2026-11077
Oracle Linux 8 python3.11 +7 3.11.13-7.0.1.el8_10 ELSA-2026-11062
Oracle Linux 8 python3.12 +7 3.12.13-2.el8_10 ELSA-2026-10950

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling python-3.10 3.10.20-r3 —
Wolfi rolling python-3.11 3.11.15-r2 —
Wolfi rolling python-3.12 3.12.13-r3 —
Wolfi rolling python-3.13 3.13.13-r2 —
Wolfi rolling python-3.14 3.14.4-r3 —

Advisories 50

References