{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2025-12084: fix quadratic algorithm when building nested XML\n elements with appendChild", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/advisories/2026/clsa-2026_1773479178.json" } ], "tracking": { "current_release_date": "2026-05-06T17:43:47Z", "generator": { "date": "2026-05-06T17:43:47Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1773479178", "initial_release_date": "2026-03-14T09:06:57Z", "revision_history": [ { "date": "2026-03-14T09:06:57Z", "number": "1", "summary": "Initial version" }, { "date": "2026-05-06T17:43:47Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "python: Fix of CVE-2025-12084" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 7", "product": { "name": "Oracle Linux 7", "product_id": "Oracle-Linux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_id": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_id": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_id": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "product": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "product_id": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.5-94.0.1.el7_9.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" }, "product_reference": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64" }, "product_reference": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686" }, "product_reference": "python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64" }, "product_reference": "python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-27043", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ], "known_affected": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-27043" }, { "category": "external", "summary": "http://python.org", "url": "http://python.org/" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/102988", "url": "https://github.com/python/cpython/issues/102988" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/" }, { "category": "external", "summary": "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html", "url": "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230601-0003/", "url": "https://security.netapp.com/advisory/ntap-20230601-0003/" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2025/Apr/8", "url": "http://seclists.org/fulldisclosure/2025/Apr/8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/" } ], "release_date": "2023-04-19T00:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-03-14T09:06:20.829186Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178", "product_ids": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178" }, { "category": "none_available", "details": "Affected", "product_ids": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-12084", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ], "known_affected": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-12084" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0", "url": "https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4", "url": "https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437", "url": "https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af", "url": "https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a273", "url": "https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a273" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907", "url": "https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d", "url": "https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb8", "url": "https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8", "url": "https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc0", "url": "https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc0" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964", "url": "https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b53", "url": "https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b53" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/142145", "url": "https://github.com/python/cpython/issues/142145" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/142146", "url": "https://github.com/python/cpython/pull/142146" } ], "release_date": "2025-12-03T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-03-14T09:06:20.829186Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178", "product_ids": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178" }, { "category": "none_available", "details": "Affected", "product_ids": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2022-48566", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ], "known_affected": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-48566" }, { "category": "external", "summary": "https://bugs.python.org/issue40791", "url": "https://bugs.python.org/issue40791" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html", "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20231006-0013/", "url": "https://security.netapp.com/advisory/ntap-20231006-0013/" } ], "release_date": "2023-08-22T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-03-14T09:06:20.829186Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178", "product_ids": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1773479178" }, { "category": "none_available", "details": "Affected", "product_ids": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-7:python-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-debug-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-devel-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.i686", "Oracle-Linux-7:python-libs-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-test-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:python-tools-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64", "Oracle-Linux-7:tkinter-0:2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }