Description
bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Python Software Foundation | CPython | < 3.10.21, 3.11.0 – < 3.11.16, 3.12.0 – < 3.12.14, 3.13.0 – < 3.13.14, 3.14.0 – < 3.14.6, 3.15.0a1 – < 3.15.0b3 | 3.10.21 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python3.14 | 3.14.6-1 | — |
| Debian 13 | python3.13 | 3.13.5-2+deb13u3 | — |
| Debian 12 | python3.11 | 3.11.2-6+deb12u9 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | python3.14 | 3.14.4-1ubuntu0.1 | USN-8509-1 |
| Ubuntu 25.10 | python3.13 +1 | No fix yet | — |
| Ubuntu 24.04 LTS | python3.12 | 3.12.3-1ubuntu0.15 | USN-8509-1 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.16 | USN-8509-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | python2.7 +1 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | python2.7 +2 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | python2.7 +3 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | python2.7 +1 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | python2.7 +2 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | python3 +15 | 3.14.7-1.2.hum1 | RHSA-2026:67572 |
| Red Hat Hardened Images 1 | python3.10 +6 | 3.10.21-1.3.hum1 | RHSA-2026:68132 |
| Red Hat Hardened Images 1 | python3.11 +6 | 3.11.16-1.4.hum1 | RHSA-2026:68135 |
| Red Hat Hardened Images 1 | python3.12 +6 | 3.12.14-1.3.hum1 | RHSA-2026:68154 |
| Red Hat Hardened Images 1 | python3.13 +8 | 3.13.15-1.3.hum1 | RHSA-2026:68309 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | python +1 | 2.7.18-150000.133.1 | SUSE-SU-2026:4411-1 |
| SLES 15 SP7 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES 15 SP7 | python311-core | 3.11.17-150600.3.74.1 | SUSE-SU-2026:4946-1 |
| SLES 15 SP6 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES 15 SP6 | python311 +1 | 3.11.17-150600.3.74.1 | SUSE-SU-2026:4946-1 |
| SLES 15 SP6 | python312 +1 | 3.12.14-150600.3.68.1 | SUSE-SU-2026:4534-1 |
| SLES 15 SP5 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES 15 SP5 | python311 +2 | 3.11.16-150400.9.102.1 | SUSE-SU-2026:4396-1 |
| SLES 15 SP4 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES 15 SP4 | python311 +2 | 3.11.16-150400.9.102.1 | SUSE-SU-2026:4396-1 |
| SLES 12 SP5 | python +2 | 2.7.18-33.88.1 | SUSE-SU-2026:4633-1 |
| SLES 12 SP5 | python3 +1 | 3.4.10-25.199.1 | SUSE-SU-2026:4744-1 |
| SLES 12 SP5 | python36 +1 | 3.6.15-125.1 | SUSE-SU-2026:4743-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 3 | python311 +1 | 3.11.17-150600.3.74.1 | SUSE-SU-2026:4946-1 |
| SLES 3 | python313 +1 | 3.13.15-150700.4.56.1 | SUSE-SU-2026:4401-1 |
| SLES for SAP 15 SP6 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES for SAP 15 SP6 | python311 +1 | 3.11.17-150600.3.74.1 | SUSE-SU-2026:4946-1 |
| SLES for SAP 15 SP6 | python312 +1 | 3.12.14-150600.3.68.1 | SUSE-SU-2026:4534-1 |
| SLES for SAP 15 SP5 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES for SAP 15 SP5 | python311 +2 | 3.11.16-150400.9.102.1 | SUSE-SU-2026:4396-1 |
| SLES for SAP 15 SP4 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLES for SAP 15 SP4 | python311 +2 | 3.11.16-150400.9.102.1 | SUSE-SU-2026:4396-1 |
| SLE Micro 6.1 | python311 +1 | 3.11.16-slfo.1.1_1.1 | SUSE-SU-2026:23743-1 |
| SLE Micro 6.0 | python311 +1 | 3.11.16-1.1 | SUSE-SU-2026:23845-1 |
| SLE Micro 5.5 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLE Micro 5.4 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLE Micro 5.3 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLE HPC 15 SP5 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLE HPC 15 SP5 | python311 +2 | 3.11.16-150400.9.102.1 | SUSE-SU-2026:4396-1 |
| SLE HPC 15 SP4 | python3 +1 | 3.6.15-150300.10.129.1 | SUSE-SU-2026:4754-1 |
| SLE HPC 15 SP4 | python311 +2 | 3.11.16-150400.9.102.1 | SUSE-SU-2026:4396-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python310 | 3.10.21-1.1 | openSUSE-SU-2026:11747-1 |
| openSUSE Tumbleweed | python311 | 3.11.16-1.1 | openSUSE-SU-2026:11756-1 |
| openSUSE Tumbleweed | python312 | 3.12.14-1.1 | openSUSE-SU-2026:11757-1 |
| openSUSE Tumbleweed | python313 | 3.13.15-1.1 | openSUSE-SU-2026:11817-1 |
| openSUSE Tumbleweed | python314 | 3.14.6-1.1 | openSUSE-SU-2026:11181-1 |
| openSUSE Tumbleweed | python315 | 3.15.0~rc2-1.1 | openSUSE-SU-2026:11748-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | python3 | 3.14.7-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3 +7 | 3.9.25-1.amzn2023.0.8 | ALAS2023-2026-1963 |
| Amazon Linux 2023 | python3.11 +6 | 3.11.15-1.amzn2023.0.4 | ALAS2023-2026-1953 |
| Amazon Linux 2023 | python3.12 +6 | 3.12.13-2.amzn2023.0.4 | ALAS2023-2026-1954 |
| Amazon Linux 2023 | python3.13 +8 | 3.13.14-1.amzn2023.0.1 | ALAS2023-2026-1910 |
| Amazon Linux 2023 | python3.14 +13 | 3.14.6-1.amzn2023.0.1 | ALAS2023-2026-1929 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python3 | 3.12.9-14 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | python-3.10 | 3.10.21-r0 | — |
| Wolfi rolling | python-3.11 | 3.11.16-r1 | — |
| Wolfi rolling | python-3.12 | 3.12.14-r2 | — |
| Wolfi rolling | python-3.13 | 3.13.14-r0 | — |
| Wolfi rolling | python-3.14 | 3.14.6-r1 | — |
Advisories 30
- SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
- SUSE-SU-2026:4946-1 Security update for python311 SUSE / openSUSE Security Updates · Oct 31, 2026
- WID-SEC-2026-1830 CPython: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 29, 2026
- SUSE-SU-2026:4754-1 Security update for python3 SUSE / openSUSE Security Updates · Oct 21, 2026
- SUSE-SU-2026:4744-1 Security update for python3, python3-base, python3-doc SUSE / openSUSE Security Updates · Oct 20, 2026
- SUSE-SU-2026:4743-1 Security update for python36 SUSE / openSUSE Security Updates · Oct 20, 2026
- RHSA-2026:68309 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:68135 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:68154 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:68132 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:67572 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- SUSE-SU-2026:4633-1 Security update for python SUSE / openSUSE Security Updates · Oct 13, 2026
- SUSE-SU-2026:4534-1 Security update for python312 SUSE / openSUSE Security Updates · Oct 6, 2026
- SUSE-SU-2026:4411-1 Security update for python SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4401-1 Security update for python313 SUSE / openSUSE Security Updates · Oct 1, 2026
- SUSE-SU-2026:4396-1 Security update for python311 SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:23845-1 Security update for python311 SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23743-1 Security update for python311 SUSE / openSUSE Security Updates · Sep 27, 2026
- openSUSE-SU-2026:11817-1 python313-3.13.15-1.1 on GA media SUSE / openSUSE Security Updates · Sep 19, 2026
- openSUSE-SU-2026:11757-1 python312-3.12.14-1.1 on GA media SUSE / openSUSE Security Updates · Sep 12, 2026
- openSUSE-SU-2026:11756-1 python311-3.11.16-1.1 on GA media SUSE / openSUSE Security Updates · Sep 12, 2026
- openSUSE-SU-2026:11747-1 python310-3.10.21-1.1 on GA media SUSE / openSUSE Security Updates · Sep 11, 2026
- openSUSE-SU-2026:11748-1 python315-3.15.0~rc2-1.1 on GA media SUSE / openSUSE Security Updates · Sep 11, 2026
- ALAS2023-2026-1929 Important: python3.14 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 24, 2026
- ALAS2023-2026-1953 Important: python3.11 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 20, 2026
- ALAS2023-2026-1954 Important: python3.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 20, 2026
- ALAS2023-2026-1963 Important: python3.9 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 20, 2026
- ALAS2023-2026-1910 Important: python3.13 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 7, 2026
- USN-8509-1 python3.10, python3.12, python3.14 vulnerabilities Ubuntu Security Notices (USN) · Jul 6, 2026
- openSUSE-SU-2026:11181-1 python314-3.14.6-1.1 on GA media SUSE / openSUSE Security Updates · Jul 3, 2026
References
- https://github.com/python/cpython/pull/150600 patch
- https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/ vendor-advisory
- https://github.com/python/cpython/issues/150599 issue-tracking
- https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6 patch
- https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e patch
- https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f patch
- https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d patch
- https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79 patch
- https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2 patch
- https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636 patch