RHSA-2026:74087
Vulnerability from csaf_redhat - Published: 2026-09-30 21:20 - Updated: 2026-10-01 03:32Summary
Red Hat Security Advisory: python3.9 security update
Severity
Important
Notes
Topic: An update for python3.9 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
* python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940)
* python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A denial-of-service (DoS) vulnerability has been discovered in Python's html.parser.HTMLParser class. When processing specially malformed HTML input, the parsing runtime can become quadratic with respect to the input size. This significantly increased processing time can lead to excessive resource consumption, ultimately causing a denial-of-service condition in applications that rely on this parser.
4.3 (Medium)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A vulnerability in Python’s os.path.expandvars() function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denial of service (DoS) conditions. No code execution or data exposure occurs, so the impact is limited to performance slowdown.
4.0 (Medium)
Affected products
Fixed
40 products, the same list as for
CVE-2025-6069
Threats
Impact
Low
A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.
7.3 (High)
Affected products
Fixed
40 products, the same list as for
CVE-2025-6069
Threats
Impact
Important
A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.
7.5 (High)
Affected products
Fixed
40 products, the same list as for
CVE-2025-6069
Threats
Impact
Important
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python3.9 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)\n\n* python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)\n\n* python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940)\n\n* python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:74087",
"url": "https://access.redhat.com/errata/RHSA-2026:74087"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2373234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373234"
},
{
"category": "external",
"summary": "2408891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891"
},
{
"category": "external",
"summary": "2491848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491848"
},
{
"category": "external",
"summary": "2498608",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74087.json"
}
],
"title": "Red Hat Security Advisory: python3.9 security update",
"tracking": {
"current_release_date": "2026-10-01T03:32:13+00:00",
"generator": {
"date": "2026-10-01T03:32:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:74087",
"initial_release_date": "2026-09-30T21:20:22+00:00",
"revision_history": [
{
"date": "2026-09-30T21:20:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-30T21:20:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-01T03:32:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"product": {
"name": "python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"product_id": "python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-unversioned-command@3.9.18-3.el9_4.14?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-devel-0:3.9.18-3.el9_4.14.s390x",
"product": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.s390x",
"product_id": "python3-devel-0:3.9.18-3.el9_4.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-devel@3.9.18-3.el9_4.14?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"product": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"product_id": "python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tkinter@3.9.18-3.el9_4.14?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"product": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"product_id": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debugsource@3.9.18-3.el9_4.14?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"product": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"product_id": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debuginfo@3.9.18-3.el9_4.14?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-0:3.9.18-3.el9_4.14.s390x",
"product": {
"name": "python3-0:3.9.18-3.el9_4.14.s390x",
"product_id": "python3-0:3.9.18-3.el9_4.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3@3.9.18-3.el9_4.14?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3-libs-0:3.9.18-3.el9_4.14.s390x",
"product": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.s390x",
"product_id": "python3-libs-0:3.9.18-3.el9_4.14.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libs@3.9.18-3.el9_4.14?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"product": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"product_id": "python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-devel@3.9.18-3.el9_4.14?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"product": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"product_id": "python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tkinter@3.9.18-3.el9_4.14?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"product": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"product_id": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debugsource@3.9.18-3.el9_4.14?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"product": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"product_id": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debuginfo@3.9.18-3.el9_4.14?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-0:3.9.18-3.el9_4.14.aarch64",
"product": {
"name": "python3-0:3.9.18-3.el9_4.14.aarch64",
"product_id": "python3-0:3.9.18-3.el9_4.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3@3.9.18-3.el9_4.14?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"product": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"product_id": "python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libs@3.9.18-3.el9_4.14?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-devel-0:3.9.18-3.el9_4.14.i686",
"product": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.i686",
"product_id": "python3-devel-0:3.9.18-3.el9_4.14.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-devel@3.9.18-3.el9_4.14?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"product": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"product_id": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debugsource@3.9.18-3.el9_4.14?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"product": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"product_id": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debuginfo@3.9.18-3.el9_4.14?arch=i686"
}
}
},
{
"category": "product_version",
"name": "python3-libs-0:3.9.18-3.el9_4.14.i686",
"product": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.i686",
"product_id": "python3-libs-0:3.9.18-3.el9_4.14.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libs@3.9.18-3.el9_4.14?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"product": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"product_id": "python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-devel@3.9.18-3.el9_4.14?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"product": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"product_id": "python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tkinter@3.9.18-3.el9_4.14?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"product": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"product_id": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debugsource@3.9.18-3.el9_4.14?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"product": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"product_id": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debuginfo@3.9.18-3.el9_4.14?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-0:3.9.18-3.el9_4.14.x86_64",
"product": {
"name": "python3-0:3.9.18-3.el9_4.14.x86_64",
"product_id": "python3-0:3.9.18-3.el9_4.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3@3.9.18-3.el9_4.14?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"product": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"product_id": "python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libs@3.9.18-3.el9_4.14?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"product": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"product_id": "python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-devel@3.9.18-3.el9_4.14?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"product": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"product_id": "python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tkinter@3.9.18-3.el9_4.14?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"product": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"product_id": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debugsource@3.9.18-3.el9_4.14?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"product": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"product_id": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9-debuginfo@3.9.18-3.el9_4.14?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-0:3.9.18-3.el9_4.14.ppc64le",
"product": {
"name": "python3-0:3.9.18-3.el9_4.14.ppc64le",
"product_id": "python3-0:3.9.18-3.el9_4.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3@3.9.18-3.el9_4.14?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"product": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"product_id": "python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libs@3.9.18-3.el9_4.14?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.9-0:3.9.18-3.el9_4.14.src",
"product": {
"name": "python3.9-0:3.9.18-3.el9_4.14.src",
"product_id": "python3.9-0:3.9.18-3.el9_4.14.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.9@3.9.18-3.el9_4.14?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-unversioned-command-0:3.9.18-3.el9_4.14.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch"
},
"product_reference": "python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686"
},
"product_reference": "python3-devel-0:3.9.18-3.el9_4.14.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3-devel-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-devel-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tkinter-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686"
},
"product_reference": "python3-libs-0:3.9.18-3.el9_4.14.i686",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3-libs-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libs-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-0:3.9.18-3.el9_4.14.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src"
},
"product_reference": "python3.9-0:3.9.18-3.el9_4.14.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
},
"product_reference": "python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-6069",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2025-06-17T14:00:45.339399+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2373234"
}
],
"notes": [
{
"category": "description",
"text": "A denial-of-service (DoS) vulnerability has been discovered in Python\u0027s html.parser.HTMLParser class. When processing specially malformed HTML input, the parsing runtime can become quadratic with respect to the input size. This significantly increased processing time can lead to excessive resource consumption, ultimately causing a denial-of-service condition in applications that rely on this parser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cpython: Python HTMLParser quadratic complexity",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-6069"
},
{
"category": "external",
"summary": "RHBZ#2373234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6069",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6069"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949",
"url": "https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41",
"url": "https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b",
"url": "https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/135462",
"url": "https://github.com/python/cpython/issues/135462"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/135464",
"url": "https://github.com/python/cpython/pull/135464"
}
],
"release_date": "2025-06-17T13:39:46.058000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:20:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74087"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cpython: Python HTMLParser quadratic complexity"
},
{
"cve": "CVE-2025-6075",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-31T17:01:47.052517+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2408891"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Python\u2019s os.path.expandvars() function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denial of service (DoS) conditions. No code execution or data exposure occurs, so the impact is limited to performance slowdown.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Quadratic complexity in os.path.expandvars() with user-controlled template",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Low rather than Moderate because it only causes a performance inefficiency without affecting code execution, data integrity, or confidentiality. The flaw lies in the algorithmic complexity of os.path.expandvars(), which can become quadratic when processing crafted input containing repetitive or nested environment variable references. Exploitation requires the attacker to control the input string passed to this function, which is uncommon in secure applications. Moreover, the impact is limited to increased CPU utilization and potential slowdown, not system compromise or data manipulation. Since the issue does not introduce memory corruption, privilege escalation, or information disclosure risks, its overall impact scope and exploitability are minimal, justifying a Low severity rating.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-6075"
},
{
"category": "external",
"summary": "RHBZ#2408891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408891"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-6075",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6075"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/136065",
"url": "https://github.com/python/cpython/issues/136065"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/IUP5QJ6D4KK6ULHOMPC7DPNKRYQTQNLA/"
}
],
"release_date": "2025-10-31T16:41:34.983000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:20:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74087"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "python: Quadratic complexity in os.path.expandvars() with user-controlled template"
},
{
"cve": "CVE-2026-11940",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-23T17:05:33.822236+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491848"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `tarfile.extractall()` function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside the intended destination directory. This could lead to out-of-destination file reads or writes, potentially resulting in information disclosure or arbitrary file modification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products that appear in dependency searches under names containing \"tarfile\" but that are not the CPython standard-library tarfile module are not affected by this flaw. Matches such as the Go packages under github.com/containers/image / go.podman.io/image (.../docker/tarfile and .../docker/internal/tarfile) and the Apache Camel artifacts (camel-tarfile, camel-quarkus-tarfile) are unrelated implementations in other languages and do not include the vulnerable CPython tarfile.extractall() filter logic. The separately packaged PyPI component backports-tarfile is also out of scope for this CVE as assigned: it is not the CPython stdlib module named in the advisory and this CVE tracks the interpreter-provided tarfile shipped in Red Hat python3* packages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "RHBZ#2491848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491848"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11940"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/151558",
"url": "https://github.com/python/cpython/issues/151558"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/151559",
"url": "https://github.com/python/cpython/pull/151559"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"
}
],
"release_date": "2026-06-23T16:04:17.321000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:20:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74087"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory"
},
{
"cve": "CVE-2026-15308",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-09T18:02:10.090070+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498608"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Python\u0027s `html.parser.HTMLParser` can lead to a denial of service. By supplying specially crafted, malformed HTML with repeated unterminated markup declarations, an attacker can cause excessive CPU consumption, rendering the system unresponsive. Red Hat products utilizing this parser to process untrusted HTML content are susceptible to resource exhaustion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "RHBZ#2498608",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
"url": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
"url": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
"url": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
"url": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/153030",
"url": "https://github.com/python/cpython/issues/153030"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/153031",
"url": "https://github.com/python/cpython/pull/153031"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/"
}
],
"release_date": "2026-07-09T17:10:57.317000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:20:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74087"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:python-unversioned-command-0:3.9.18-3.el9_4.14.noarch",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-devel-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3-tkinter-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"AppStream-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3-libs-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-0:3.9.18-3.el9_4.14.src",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debuginfo-0:3.9.18-3.el9_4.14.x86_64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.aarch64",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.i686",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.ppc64le",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.s390x",
"BaseOS-9.4.0.Z.E4S:python3.9-debugsource-0:3.9.18-3.el9_4.14.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…