{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* Drop the (<< 1:6.0) version constraint on the libdb-dev build dependency\n in debian/control.in and debian/control, matching debian10els. Bullseye\n ships only libdb-dev 5.3.1+nmu1, so the constraint excludes nothing, and\n the builder's pbuilder-satisfydepends misreads the '<<' relation as a\n build-profile restriction and skips installing the package entirely.\n * SECURITY UPDATE: directory traversal when extracting tar archives\n - debian/patches/CVE-2007-4559.patch: add the PEP 706 extraction filter\n API to Lib/tarfile.py, providing the fully_trusted, tar and data\n filters, the FilterError exception hierarchy, the TarFile.\n extraction_filter attribute and the filter= argument to extract() and\n extractall(), so that callers can reject members that would escape the\n destination directory. Includes the upstream follow-ups gh-149486 and\n gh-155999, which validate the written link target and normalise a\n member name that leaves the destination and comes back. The filters\n remain opt-in and do not contain a member extracted at errorlevel=0\n or through makelink()'s hardlink fallback; see the patch header\n - CVE-2007-4559\n * SECURITY UPDATE: quadratic complexity in IDNA decoding\n - debian/patches/CVE-2022-45061.patch: replace the per-character\n 'for c in RandAL: if c:' BIDI loop in nameprep() with a single\n 'if any(RandAL):' test in Lib/encodings/idna.py, so the RandALCat\n checks run once instead of once per character, restoring linear\n behaviour\n - CVE-2022-45061\n * SECURITY UPDATE: control character injection via http cookies\n - debian/patches/CVE-2026-0672.patch: reject control characters in\n Morsel keys, values, coded values and reserved attributes in\n Lib/Cookie.py\n - CVE-2026-0672\n * SECURITY UPDATE: incomplete fix for the http cookie control character\n injection\n - debian/patches/CVE-2026-3644.patch: apply the same control character\n rejection to Morsel.update() and js_output() in Lib/Cookie.py, which\n the previous fix left unguarded\n - CVE-2026-3644\n * SECURITY UPDATE: configuration file injection via carriage returns in\n written option values\n - debian/patches/CVE-2026-0864.patch: normalise CR and CRLF, and not\n only LF, into '\\n\\t' continuation lines when writing option values in\n RawConfigParser.write() in Lib/ConfigParser.py, so that an\n attacker-controlled value can no longer inject additional sections,\n keys and values into the written file\n - CVE-2026-0864\n * SECURITY UPDATE: C stack overflow parsing deeply nested content models\n - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in\n Modules/pyexpat.c with Py_EnterRecursiveCall(), so that a deeply\n nested element declaration raises RuntimeError instead of crashing\n the interpreter\n - CVE-2026-4224\n * SECURITY UPDATE: argument injection via leading dashes in browser URLs\n - debian/patches/CVE-2026-4519.patch: reject URLs beginning with a dash\n in BaseBrowser._check_url() in Lib/webbrowser.py, so that a URL can no\n longer be passed to the browser process as an option\n - CVE-2026-4519\n * SECURITY UPDATE: CPU denial-of-service in html.parser.HTMLParser via\n repeated unterminated markup declarations in incremental parsing\n - debian/patches/CVE-2026-15308.patch: accumulate incrementally fed data\n in a list and only join and parse it once enough has piled up, in\n Lib/HTMLParser.py\n - CVE-2026-15308", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian11els/advisories/2026/clsa-2026_1789730024.json" } ], "tracking": { "current_release_date": "2026-09-18T11:15:12Z", "generator": { "date": "2026-09-18T11:15:12Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1789730024", "initial_release_date": "2026-09-18T11:15:12Z", "revision_history": [ { "date": "2026-09-18T11:15:12Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 7 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 11", "product": { "name": "Debian 11", "product_id": "Debian-11", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-stdlib@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_id": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-stdlib@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } }, { "category": "product_version", "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_id": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=arm64" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-stdlib@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_id": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-stdlib@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_id": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-stdlib@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_id": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-dev@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-stdlib@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-minimal@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } }, { "category": "product_version", "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_id": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=armel" } } } ], "category": "architecture", "name": "armel" }, { "branches": [ { "category": "product_version", "name": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product": { "name": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_id": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-examples@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product": { "name": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_id": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/idle-python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product": { "name": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_id": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-testsuite@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product": { "name": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_id": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-doc@2.7.18-8%2Bdeb11u1%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product": { "name": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_id": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-doc@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product": { "name": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_id": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/idle-python2.7@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product": { "name": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_id": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/python2.7-examples@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product": { "name": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_id": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpython2.7-testsuite@2.7.18-8%2Bdeb11u1%2Btuxcare.els2?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all" }, "product_reference": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all" }, "product_reference": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64" }, "product_reference": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel" }, "product_reference": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64" }, "product_reference": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all" }, "product_reference": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all" }, "product_reference": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all as a component of Debian 11", "product_id": "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all" }, "product_reference": "python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all as a component of Debian 11", "product_id": "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all" }, "product_reference": "idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel as a component of Debian 11", "product_id": "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel" }, "product_reference": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64 as a component of Debian 11", "product_id": "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64" }, "product_reference": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64 as a component of Debian 11", "product_id": "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64" }, "product_reference": "python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all as a component of Debian 11", "product_id": "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all" }, "product_reference": "python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all as a component of Debian 11", "product_id": "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all" }, "product_reference": "libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "relates_to_product_reference": "Debian-11" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-0864", "cwe": { "id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')" }, "notes": [ { "category": "description", "text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0864" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528", "url": "https://github.com/python/cpython/commit/0adb386f6e68eb2e73d32e19f235d012df009528" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/12dcbd74d3563016a8cb8c47e4898889f34f74dd", "url": "https://github.com/python/cpython/commit/12dcbd74d3563016a8cb8c47e4898889f34f74dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/274de100bbf4345bd0c23ef5b446722e9e636908", "url": "https://github.com/python/cpython/commit/274de100bbf4345bd0c23ef5b446722e9e636908" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f", "url": "https://github.com/python/cpython/commit/5858e42c539dac8394636a6e9b30472b8994851f" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98", "url": "https://github.com/python/cpython/commit/71f2e02a52d47417a6fd69f456346cd8aa7aca98" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8", "url": "https://github.com/python/cpython/commit/aaf850fd333cd89e9aada03d92aaa788a6cb1bb8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/db4a157c790479710a1a840d7937c5c815a6f8b6", "url": "https://github.com/python/cpython/commit/db4a157c790479710a1a840d7937c5c815a6f8b6" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/143927", "url": "https://github.com/python/cpython/issues/143927" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/151559", "url": "https://github.com/python/cpython/pull/151559" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/CV4NE6AFCRJL7XQOHX7J5TSDHUWVWGJS/" } ], "release_date": "2026-06-23T18:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2026-06-23T18:17:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2007-4559", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2007-4559" }, { "category": "external", "summary": "http://mail.python.org/pipermail/python-dev/2007-August/074290.html", "url": "http://mail.python.org/pipermail/python-dev/2007-August/074290.html" }, { "category": "external", "summary": "http://mail.python.org/pipermail/python-dev/2007-August/074292.html", "url": "http://mail.python.org/pipermail/python-dev/2007-August/074292.html" }, { "category": "external", "summary": "http://secunia.com/advisories/26623", "url": "http://secunia.com/advisories/26623" }, { "category": "external", "summary": "http://www.vupen.com/english/advisories/2007/3022", "url": "http://www.vupen.com/english/advisories/2007/3022" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=263261", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=263261" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202309-06", "url": "https://security.gentoo.org/glsa/202309-06" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/" } ], "release_date": "2007-08-28T01:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2007-08-28T01:17:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-3644", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3644" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330", "url": "https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8", "url": "https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4", "url": "https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd", "url": "https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd", "url": "https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef", "url": "https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/145599", "url": "https://github.com/python/cpython/issues/145599" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/145600", "url": "https://github.com/python/cpython/pull/145600" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/" } ], "release_date": "2026-03-16T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2026-03-16T18:16:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-4519", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "The webbrowser.open() API would accept leading dashes in the URL which \ncould be handled as command line options for certain web browsers. New \nbehavior rejects leading dashes. Users are recommended to sanitize URLs \nprior to passing to webbrowser.open().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4519" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd", "url": "https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866", "url": "https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e", "url": "https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1", "url": "https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b", "url": "https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4", "url": "https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76", "url": "https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c", "url": "https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5", "url": "https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48", "url": "https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932", "url": "https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03", "url": "https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/143930", "url": "https://github.com/python/cpython/issues/143930" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/143931", "url": "https://github.com/python/cpython/pull/143931" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/03/20/1", "url": "http://www.openwall.com/lists/oss-security/2026/03/20/1" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10065", "url": "https://access.redhat.com/errata/RHSA-2026:10065" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10101", "url": "https://access.redhat.com/errata/RHSA-2026:10101" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10102", "url": "https://access.redhat.com/errata/RHSA-2026:10102" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10111", "url": "https://access.redhat.com/errata/RHSA-2026:10111" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10140", "url": "https://access.redhat.com/errata/RHSA-2026:10140" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10141", "url": "https://access.redhat.com/errata/RHSA-2026:10141" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:13812", "url": "https://access.redhat.com/errata/RHSA-2026:13812" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16008", "url": "https://access.redhat.com/errata/RHSA-2026:16008" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16009", "url": "https://access.redhat.com/errata/RHSA-2026:16009" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16030", "url": "https://access.redhat.com/errata/RHSA-2026:16030" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16174", "url": "https://access.redhat.com/errata/RHSA-2026:16174" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19019", "url": "https://access.redhat.com/errata/RHSA-2026:19019" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19064", "url": "https://access.redhat.com/errata/RHSA-2026:19064" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19175", "url": "https://access.redhat.com/errata/RHSA-2026:19175" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19176", "url": "https://access.redhat.com/errata/RHSA-2026:19176" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19177", "url": "https://access.redhat.com/errata/RHSA-2026:19177" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19216", "url": "https://access.redhat.com/errata/RHSA-2026:19216" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19724", "url": "https://access.redhat.com/errata/RHSA-2026:19724" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19725", "url": "https://access.redhat.com/errata/RHSA-2026:19725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21275", "url": "https://access.redhat.com/errata/RHSA-2026:21275" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25096", "url": "https://access.redhat.com/errata/RHSA-2026:25096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6016", "url": "https://access.redhat.com/errata/RHSA-2026:6016" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6035", "url": "https://access.redhat.com/errata/RHSA-2026:6035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6256", "url": "https://access.redhat.com/errata/RHSA-2026:6256" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6281", "url": "https://access.redhat.com/errata/RHSA-2026:6281" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6283", "url": "https://access.redhat.com/errata/RHSA-2026:6283" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6285", "url": "https://access.redhat.com/errata/RHSA-2026:6285" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6286", "url": "https://access.redhat.com/errata/RHSA-2026:6286" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6473", "url": "https://access.redhat.com/errata/RHSA-2026:6473" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6766", "url": "https://access.redhat.com/errata/RHSA-2026:6766" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7010", "url": "https://access.redhat.com/errata/RHSA-2026:7010" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7244", "url": "https://access.redhat.com/errata/RHSA-2026:7244" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7329", "url": "https://access.redhat.com/errata/RHSA-2026:7329" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7335", "url": "https://access.redhat.com/errata/RHSA-2026:7335" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7443", "url": "https://access.redhat.com/errata/RHSA-2026:7443" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7661", "url": "https://access.redhat.com/errata/RHSA-2026:7661" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8746", "url": "https://access.redhat.com/errata/RHSA-2026:8746" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8747", "url": "https://access.redhat.com/errata/RHSA-2026:8747" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8748", "url": "https://access.redhat.com/errata/RHSA-2026:8748" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9042", "url": "https://access.redhat.com/errata/RHSA-2026:9042" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9260", "url": "https://access.redhat.com/errata/RHSA-2026:9260" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9261", "url": "https://access.redhat.com/errata/RHSA-2026:9261" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9262", "url": "https://access.redhat.com/errata/RHSA-2026:9262" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9289", "url": "https://access.redhat.com/errata/RHSA-2026:9289" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9354", "url": "https://access.redhat.com/errata/RHSA-2026:9354" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9386", "url": "https://access.redhat.com/errata/RHSA-2026:9386" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9387", "url": "https://access.redhat.com/errata/RHSA-2026:9387" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9591", "url": "https://access.redhat.com/errata/RHSA-2026:9591" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9614", "url": "https://access.redhat.com/errata/RHSA-2026:9614" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9621", "url": "https://access.redhat.com/errata/RHSA-2026:9621" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9705", "url": "https://access.redhat.com/errata/RHSA-2026:9705" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9745", "url": "https://access.redhat.com/errata/RHSA-2026:9745" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-4519", "url": "https://access.redhat.com/security/cve/CVE-2026-4519" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json" } ], "release_date": "2026-03-20T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2026-03-20T15:16:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2026-4224", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "description", "text": "When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4224" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a", "url": "https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621", "url": "https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785", "url": "https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee", "url": "https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3", "url": "https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768", "url": "https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/145986", "url": "https://github.com/python/cpython/issues/145986" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/145987", "url": "https://github.com/python/cpython/pull/145987" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/03/16/4", "url": "http://www.openwall.com/lists/oss-security/2026/03/16/4" } ], "release_date": "2026-03-16T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2026-03-16T18:16:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-15308", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-15308" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9", "url": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7", "url": "https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14", "url": "https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced", "url": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606", "url": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00", "url": "https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd", "url": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/153030", "url": "https://github.com/python/cpython/issues/153030" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/153031", "url": "https://github.com/python/cpython/pull/153031" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/07/09/4", "url": "http://www.openwall.com/lists/oss-security/2026/07/09/4" } ], "release_date": "2026-07-09T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2026-07-09T17:16:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-45061", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "known_affected": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-45061" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/98433", "url": "https://github.com/python/cpython/issues/98433" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html", "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-02", "url": "https://security.gentoo.org/glsa/202305-02" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20221209-0007/", "url": "https://security.netapp.com/advisory/ntap-20221209-0007/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html" } ], "release_date": "2022-11-09T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-18T11:13:46.646711Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els1.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els1.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els1.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789730024" }, { "category": "none_available", "date": "2022-11-09T07:15:00Z", "details": "Affected", "product_ids": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:idle-python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:libpython2.7-stdlib-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:libpython2.7-testsuite-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-dev-0:2.7.18-8+deb11u1+tuxcare.els2.armel", "Debian-11:python2.7-doc-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-examples-0:2.7.18-8+deb11u1+tuxcare.els2.all", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.amd64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.arm64", "Debian-11:python2.7-minimal-0:2.7.18-8+deb11u1+tuxcare.els2.armel" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }