Vulnerability-Lookup

RHSA-2026:89742

Vulnerability from csaf_opensuse - Published: 2026-10-26 00:00 - Updated: 2026-10-26 19:16

Summary

security update for python3.9

Severity

Important

Notes

Title of the patch: security update for python3.9

Description of the patch: This security update provides a functional equivalent of RHSA-2026:89742. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:89742.

Patchnames: RHSA-2026:89742

CVE-2026-12345

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 15 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-19445

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 15 products, the same list as for CVE-2026-12345

Threats

Impact moderate

CVE-2026-19553

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 15 products, the same list as for CVE-2026-12345

Threats

Impact moderate

References

11 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2026-12345/	self
https://www.suse.com/security/cve/CVE-2026-19445/	self
https://www.suse.com/security/cve/CVE-2026-19553/	self
https://www.suse.com/security/cve/CVE-2026-12345	external
https://bugzilla.suse.com/1283828	external
https://www.suse.com/security/cve/CVE-2026-19445	external
https://bugzilla.suse.com/1283969	external
https://www.suse.com/security/cve/CVE-2026-19553	external
https://bugzilla.suse.com/1283826	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for python3.9",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2026:89742.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:89742.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2026:89742",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_89742.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12345 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12345/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-19445 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-19445/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-19553 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-19553/"
      }
    ],
    "title": "security update for python3.9",
    "tracking": {
      "current_release_date": "2026-10-26T19:16:28Z",
      "generator": {
        "date": "2026-10-26T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2026:89742",
      "initial_release_date": "2026-10-26T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-10-26T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-26T19:16:28Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.9.25:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python3@3.9.25-7.el9_8.6?arch=i686\u0026upstream=python3-0:3.9.25-7.el9_8.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-debug-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-debug-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-debug-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-debug@3.9.25-7.el9_8.6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-devel-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-devel-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-devel-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.9.25:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python3-devel@3.9.25-7.el9_8.6?arch=i686\u0026upstream=python3-0:3.9.25-7.el9_8.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-idle-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-idle-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-idle-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.9.25:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python3-idle@3.9.25-7.el9_8.6?arch=i686\u0026upstream=python3-0:3.9.25-7.el9_8.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-libs-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-libs-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-libs-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-libs@3.9.25-7.el9_8.6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-test-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-test-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-test-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-test@3.9.25-7.el9_8.6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-tkinter-0:3.9.25-7.el9_8.6.i686",
                "product": {
                  "name": "python3-tkinter-0:3.9.25-7.el9_8.6.i686",
                  "product_id": "python3-tkinter-0:3.9.25-7.el9_8.6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-tkinter@3.9.25-7.el9_8.6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
                "product": {
                  "name": "python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
                  "product_id": "python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-unversioned-command@3.9.25-7.el9_8.6?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.9.25:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python3@3.9.25-7.el9_8.6?arch=x86_64\u0026upstream=python3-0:3.9.25-7.el9_8.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-debug-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-debug-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-debug-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-debug@3.9.25-7.el9_8.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-devel-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-devel-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-devel-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.9.25:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python3-devel@3.9.25-7.el9_8.6?arch=x86_64\u0026upstream=python3-0:3.9.25-7.el9_8.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-idle-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-idle-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-idle-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.9.25:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python3-idle@3.9.25-7.el9_8.6?arch=x86_64\u0026upstream=python3-0:3.9.25-7.el9_8.6.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-libs-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-libs-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-libs-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-libs@3.9.25-7.el9_8.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-test-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-test-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-test-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-test@3.9.25-7.el9_8.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-tkinter-0:3.9.25-7.el9_8.6.x86_64",
                "product": {
                  "name": "python3-tkinter-0:3.9.25-7.el9_8.6.x86_64",
                  "product_id": "python3-tkinter-0:3.9.25-7.el9_8.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-tkinter@3.9.25-7.el9_8.6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 9",
                "product": {
                  "name": "SUSE Liberty Linux 9",
                  "product_id": "SUSE Liberty Linux 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-unversioned-command-0:3.9.25-7.el9_8.6.noarch as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch"
        },
        "product_reference": "python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-debug-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-debug-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-debug-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-debug-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-devel-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-devel-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-devel-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-devel-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-idle-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-idle-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-idle-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-idle-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libs-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-libs-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libs-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-libs-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-test-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-test-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-test-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-test-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-tkinter-0:3.9.25-7.el9_8.6.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686"
        },
        "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.6.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-tkinter-0:3.9.25-7.el9_8.6.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
        },
        "product_reference": "python3-tkinter-0:3.9.25-7.el9_8.6.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12345",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12345"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
          "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12345",
          "url": "https://www.suse.com/security/cve/CVE-2026-12345"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283828 for CVE-2026-12345",
          "url": "https://bugzilla.suse.com/1283828"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-26T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-12345"
    },
    {
      "cve": "CVE-2026-19445",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-19445"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
          "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-19445",
          "url": "https://www.suse.com/security/cve/CVE-2026-19445"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283969 for CVE-2026-19445",
          "url": "https://bugzilla.suse.com/1283969"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-26T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-19445"
    },
    {
      "cve": "CVE-2026-19553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-19553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ssl.SSLContext.wrap_bio() didn\u0027t require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn\u0027t supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn\u0027t an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn\u0027t require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn\u0027t supplied.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
          "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
          "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
          "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-19553",
          "url": "https://www.suse.com/security/cve/CVE-2026-19553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1283826 for CVE-2026-19553",
          "url": "https://bugzilla.suse.com/1283826"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9:python-unversioned-command-0:3.9.25-7.el9_8.6.noarch",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-debug-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-devel-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-idle-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-libs-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-test-0:3.9.25-7.el9_8.6.x86_64",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.i686",
            "SUSE Liberty Linux 9:python3-tkinter-0:3.9.25-7.el9_8.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-10-26T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-19553"
    }
  ]
}

CVE-2026-12345 (GCVE-0-2026-12345)

Vulnerability from cvelistv5 – Published: 2026-09-29 17:46 – Updated: 2026-10-26 00:36

Title

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

Summary

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 18:38 UTC

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 26 records in the last 180 days details

References

10 references

URL	Tags
https://github.com/python/cpython/pull/157580	patch
https://github.com/python/cpython/issues/157579	issue-tracking
https://github.com/python/cpython/commit/5c20517a…	patch
https://github.com/python/cpython/commit/458e7134…	patch
https://github.com/python/cpython/commit/e1f3590f…	patch
https://github.com/python/cpython/commit/06ef3d43…	patch
https://github.com/python/cpython/commit/58ed0259…	patch
https://github.com/python/cpython/commit/0478b527…	patch
https://github.com/python/cpython/commit/c39b52d0…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.18 (python) Affected: 3.14.0 , < 3.14.9 (python) Affected: 3.15.0a1 , < 3.15.0rc3 (python)

Credits

Bitshift (https://github.com/TheShiftedBit) Stan Ulbrych (https://github.com/StanFromIreland) Petr Viktorin (https://github.com/encukou)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12345",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T18:38:00.590353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-59",
                "description": "CWE-59 Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T18:38:55.324Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-29T21:07:55.567Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/29/40"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "tempfile"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.18",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.9",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc3",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bitshift (https://github.com/TheShiftedBit)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Stan Ulbrych (https://github.com/StanFromIreland)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Petr Viktorin (https://github.com/encukou)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."
            }
          ],
          "value": "The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T00:36:23.425Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/157580"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/157579"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-12345",
    "datePublished": "2026-09-29T17:46:01.811Z",
    "dateReserved": "2026-06-15T19:08:01.497Z",
    "dateUpdated": "2026-10-26T00:36:23.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19445 (GCVE-0-2026-19445)

Vulnerability from cvelistv5 – Published: 2026-09-30 16:16 – Updated: 2026-10-03 00:36

Title

Use-after-free of a server-side SSLContext when sni_callback switches contexts

Summary

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that create an SSLContext per connection or replace it while connections are open; servers that wrap their listening socket with it are not affected. Mitigation: keep a reference to every SSLContext that sets sni_callback for the lifetime of the server. TLS clients are not affected.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CWE

CWE-416

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 26 records in the last 180 days details

References

11 references

URL	Tags
https://github.com/python/cpython/pull/158504	patch
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/issues/156293	issue-tracking
https://github.com/python/cpython/commit/34a53dce…	patch
https://github.com/python/cpython/commit/46133cd5…	patch
https://github.com/python/cpython/commit/63fab143…	patch
https://github.com/python/cpython/commit/cd7e51e7…	patch
https://github.com/python/cpython/commit/d8717ed0…	patch
https://github.com/python/cpython/commit/b12968ce…	patch
https://github.com/python/cpython/commit/ec44b5a3…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc3 (python)

Credits

Gregory P. Smith (https://github.com/gpshead) Seth Larson (https://github.com/sethmlarson) Bénédikt Tran (https://github.com/picnixz)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-30T18:09:39.735Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/30/17"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "ssl"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc3",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Gregory P. Smith (https://github.com/gpshead)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Seth Larson (https://github.com/sethmlarson)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "B\u00e9n\u00e9dikt Tran (https://github.com/picnixz)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "\u003cp\u003eA remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\u003c/p\u003e\n\u003cp\u003eMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.\u003c/p\u003e"
            }
          ],
          "value": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-03T00:36:46.398Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/158504"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/156293"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Use-after-free of a server-side SSLContext when sni_callback switches contexts",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-19445",
    "datePublished": "2026-09-30T16:16:04.923Z",
    "dateReserved": "2026-08-10T13:31:21.724Z",
    "dateUpdated": "2026-10-03T00:36:46.398Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19553 (GCVE-0-2026-19553)

Vulnerability from cvelistv5 – Published: 2026-09-30 16:17 – Updated: 2026-10-16 18:33

Title

SSLContext.wrap_bio() missing validation of server_hostname parameter

Summary

ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to programs where certificate hostname verification *appeared* to be succeeding with SSLContext.check_hostname = True and no ValueError being raised due to misconfiguration. If the program passes a server_hostname value that isn't an empty string or None to any of these APIs then certificate hostname verification proceeds as expected and the program is not affected by this vulnerability. Mitigating this vulnerability doesn't require updating Python or applying the patch. To mitigate, pass a valid non-None and non-empty server_hostname value to SSLContext.wrap_bio(), asyncio.create_connection(), or asyncio.loop.start_tls() and certificate hostname verification will proceed as expected. Upgrading to the latest version of Python or applying the patch only changes the behavior from silently skipping hostname verification to raising a ValueError, similar to SSLContext.wrap_socket(), when server_hostname isn't supplied.

Severity

7.6 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 18:33 UTC

CWE

CWE-297

Assigner

PSF CNA under the mitre root

CNA scorecard B 80/100 over 26 records in the last 180 days details

References

11 references

URL	Tags
https://github.com/python/cpython/pull/158503	patch
https://github.com/python/cpython/issues/156793	issue-tracking
https://mail.python.org/archives/list/security-an…	vendor-advisory
https://github.com/python/cpython/commit/1697ea38…	patch
https://github.com/python/cpython/commit/64139014…	patch
https://github.com/python/cpython/commit/966bf426…	patch
https://github.com/python/cpython/commit/f4e43ba5…	patch
https://github.com/python/cpython/commit/869069d5…	patch
https://github.com/python/cpython/commit/5867d4e4…	patch
https://github.com/python/cpython/commit/bdebbf9b…	patch
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Python Software Foundation	CPython	Affected: 0 , < 3.10.22 (python) Affected: 3.11.0 , < 3.11.17 (python) Affected: 3.12.0 , < 3.12.15 (python) Affected: 3.13.0 , < 3.13.16 (python) Affected: 3.14.0 , < 3.14.8 (python) Affected: 3.15.0a1 , < 3.15.0rc3 (python)

Credits

devdanzin (https://github.com/devdanzin) Bhuvansh (https://github.com/BHUVANSH855) Bénédikt Tran (https://github.com/picnixz) Seth Larson (https://github.com/sethmlarson)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-09-30T18:09:40.939Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/09/30/16"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19553",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T18:33:08.291056Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T18:33:12.475Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "ssl"
          ],
          "product": "CPython",
          "repo": "https://github.com/python/cpython",
          "vendor": "Python Software Foundation",
          "versions": [
            {
              "lessThan": "3.10.22",
              "status": "affected",
              "version": "0",
              "versionType": "python"
            },
            {
              "lessThan": "3.11.17",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.12.15",
              "status": "affected",
              "version": "3.12.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.13.16",
              "status": "affected",
              "version": "3.13.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.14.8",
              "status": "affected",
              "version": "3.14.0",
              "versionType": "python"
            },
            {
              "lessThan": "3.15.0rc3",
              "status": "affected",
              "version": "3.15.0a1",
              "versionType": "python"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "devdanzin (https://github.com/devdanzin)"
        },
        {
          "lang": "en",
          "type": "analyst",
          "value": "Bhuvansh (https://github.com/BHUVANSH855)"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "B\u00e9n\u00e9dikt Tran (https://github.com/picnixz)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Seth Larson (https://github.com/sethmlarson)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "type": "text/html",
              "value": "\u003cp\u003e\u003ccode\u003essl.SSLContext.wrap_bio()\u003c/code\u003e didn\u0027t require the \u003ccode\u003eserver_hostname\u003c/code\u003e argument\nto not be \u003ccode\u003eNone\u003c/code\u003e if \u003ccode\u003essl.SSLContext.check_hostname\u003c/code\u003e was set. Due to a\nmissing parameter check in \u003ccode\u003eSSLObject\u003c/code\u003e, if the \u003ccode\u003eserver_hostname\u003c/code\u003e argument\nisn\u0027t supplied then hostname verification would be silently skipped.\u003c/p\u003e\n\u003cp\u003eThis defect could lead to programs where certificate hostname verification\n\u003cem\u003e*appeared*\u003c/em\u003e to be succeeding with \u003ccode\u003eSSLContext.check_hostname = True\u003c/code\u003e and no\n\u003ccode\u003eValueError\u003c/code\u003e being raised due to misconfiguration.\u003c/p\u003e\n\u003cp\u003eIf the program passes a \u003ccode\u003eserver_hostname\u003c/code\u003e value that isn\u0027t an empty string\nor \u003ccode\u003eNone\u003c/code\u003e to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\u003c/p\u003e\n\u003cp\u003eMitigating this vulnerability doesn\u0027t require updating Python or applying\nthe patch. To mitigate, pass a valid non-\u003ccode\u003eNone\u003c/code\u003e and non-empty\n\u003ccode\u003eserver_hostname\u003c/code\u003e value to \u003ccode\u003eSSLContext.wrap_bio()\u003c/code\u003e,\n\u003ccode\u003easyncio.create_connection()\u003c/code\u003e, or \u003ccode\u003easyncio.loop.start_tls()\u003c/code\u003e and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\n\u003ccode\u003eValueError\u003c/code\u003e, similar to \u003ccode\u003eSSLContext.wrap_socket()\u003c/code\u003e, when \u003ccode\u003eserver_hostname\u003c/code\u003e\nisn\u0027t supplied.\u003c/p\u003e"
            }
          ],
          "value": "ssl.SSLContext.wrap_bio() didn\u0027t require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn\u0027t supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn\u0027t an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn\u0027t require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn\u0027t supplied."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-297",
              "description": "CWE-297",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-03T00:36:35.156Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/pull/158503"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/python/cpython/issues/156793"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "SSLContext.wrap_bio() missing validation of server_hostname parameter",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "28c92f92-d60d-412d-b760-e73465c3df22",
    "assignerShortName": "PSF",
    "cveId": "CVE-2026-19553",
    "datePublished": "2026-09-30T16:17:39.368Z",
    "dateReserved": "2026-08-11T15:22:03.833Z",
    "dateUpdated": "2026-10-16T18:33:12.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:89742

CVE-2026-12345 (GCVE-0-2026-12345)

CVE-2026-19445 (GCVE-0-2026-19445)

CVE-2026-19553 (GCVE-0-2026-19553)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour