https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T15:42:13.384574+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-0397 CVE-2024-0397 — Memory race condition in ssl.SSLContext certificate store methods 2026-10-02T15:42:13.386871+00:00

Affected: Python Software Foundation CPython, python_software_foundation cpython

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

 https://vulnerability.circl.lu/vuln/usn-6928-1 USN-6928-1 — python3.10, python3.8 vulnerabilities 2026-10-02T15:42:13.386969+00:00

Affected: Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10

It was discovered that the Python ssl module contained a memory race condition when handling the APIs to obtain the CA certificates and certificate store statistics. This could possibly result in applications obtaining wrong results, leading to various SSL issues. (CVE-2024-0397)

It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered "private" or "globally reachable". This could possibly result in applications applying incorrect security policies. (CVE-2024-4032)