{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "ALTPYTH-621: Update to 3.14.8 version\n- Drop absorbed CVE patches 00477-00479", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492", "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_python/el7/advisories/2026/clsa-2026_1791365492.json" } ], "tracking": { "current_release_date": "2026-10-16T14:56:01Z", "generator": { "date": "2026-10-16T14:56:01Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791365492", "initial_release_date": "2026-10-07T09:32:41Z", "revision_history": [ { "date": "2026-10-07T09:32:41Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-16T14:56:01Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "alt-python314: Fix of 2 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 7", "product": { "name": "Community Enterprise Operating System 7", "product_id": "CentOS-7", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-python314-debug-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-debug-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-debug-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-debug@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-libs-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-libs-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-libs-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-libs@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-devel-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-devel-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-devel-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-devel@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-idle-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-idle-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-idle-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-idle@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-tkinter-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-tkinter-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-tkinter-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-tkinter@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-test-0:3.14.8-1.el7.x86_64", "product": { "name": "alt-python314-test-0:3.14.8-1.el7.x86_64", "product_id": "alt-python314-test-0:3.14.8-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-test@3.14.8-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-debug-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-debug-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-debug-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-debug@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-tkinter-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-tkinter-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-tkinter-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-tkinter@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-devel-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-devel-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-devel-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-devel@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-test-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-test-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-test-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-test@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-idle-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-idle-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-idle-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-idle@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-libs-0:3.14.7-3.el7.x86_64", "product": { "name": "alt-python314-libs-0:3.14.7-3.el7.x86_64", "product_id": "alt-python314-libs-0:3.14.7-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-libs@3.14.7-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-debug-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-debug-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-debug-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-debug@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-libs-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-libs-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-libs-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-libs@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-idle-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-idle-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-idle-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-idle@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-test-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-test-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-test-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-test@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-devel-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-devel-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-devel-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-devel@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "product": { "name": "alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "product_id": "alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-tkinter@3.14.7-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-debug-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-debug-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-debug-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-debug@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-devel-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-devel-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-devel-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-devel@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-libs-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-libs-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-libs-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-libs@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-idle-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-idle-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-idle-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-idle@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-test-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-test-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-test-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-test@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314-tkinter@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-python314-0:3.14.7-1.el7.x86_64", "product": { "name": "alt-python314-0:3.14.7-1.el7.x86_64", "product_id": "alt-python314-0:3.14.7-1.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python314@3.14.7-1.el7?arch=x86_64&os_name=centos&os_version=7" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-python314-debug-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-debug-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-libs-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-libs-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-devel-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-devel-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-idle-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-idle-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-tkinter-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-tkinter-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-test-0:3.14.8-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64" }, "product_reference": "alt-python314-test-0:3.14.8-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-debug-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-debug-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-tkinter-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-tkinter-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-devel-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-devel-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-test-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-test-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-idle-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-idle-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-libs-0:3.14.7-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64" }, "product_reference": "alt-python314-libs-0:3.14.7-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-debug-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-debug-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-libs-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-libs-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-idle-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-idle-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-test-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-test-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-devel-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-devel-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-tkinter-0:3.14.7-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64" }, "product_reference": "alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-debug-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-debug-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-devel-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-devel-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-libs-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-libs-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-idle-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-idle-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-test-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-test-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-tkinter-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python314-0:3.14.7-1.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64" }, "product_reference": "alt-python314-0:3.14.7-1.el7.x86_64", "relates_to_product_reference": "CentOS-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-19553", "cwe": { "id": "CWE-297", "name": "Improper Validation of Certificate with Host Mismatch" }, "notes": [ { "category": "description", "text": "ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-19553" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96", "url": "https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf", "url": "https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082", "url": "https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed", "url": "https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced", "url": "https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80", "url": "https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062", "url": "https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/156793", "url": "https://github.com/python/cpython/issues/156793" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/158503", "url": "https://github.com/python/cpython/pull/158503" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/09/30/16", "url": "http://www.openwall.com/lists/oss-security/2026/09/30/16" } ], "release_date": "2026-09-30T16:17:39Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T09:31:34.663453Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492", "product_ids": [ "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492" }, { "category": "none_available", "date": "2026-09-30T16:17:39Z", "details": "Affected", "product_ids": [ "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-15310", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-15310" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2", "url": "https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8", "url": "https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89", "url": "https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530", "url": "https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70", "url": "https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac", "url": "https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1", "url": "https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a", "url": "https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de", "url": "https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4", "url": "https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/156002", "url": "https://github.com/python/cpython/issues/156002" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/156003", "url": "https://github.com/python/cpython/pull/156003" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/" } ], "release_date": "2026-08-25T15:07:58Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T09:31:34.663453Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492", "product_ids": [ "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492" }, { "category": "none_available", "date": "2026-08-25T15:07:58Z", "details": "Affected", "product_ids": [ "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-19445", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2026-19445" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d", "url": "https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b", "url": "https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7", "url": "https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8", "url": "https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698", "url": "https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c", "url": "https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b", "url": "https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/156293", "url": "https://github.com/python/cpython/issues/156293" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/158504", "url": "https://github.com/python/cpython/pull/158504" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/09/30/17", "url": "http://www.openwall.com/lists/oss-security/2026/09/30/17" } ], "release_date": "2026-09-30T16:16:04Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-07T09:31:34.663453Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492", "product_ids": [ "CentOS-7:alt-python314-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.8-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.8-1.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1791365492" }, { "category": "none_available", "date": "2026-09-30T16:16:04Z", "details": "Affected", "product_ids": [ "CentOS-7:alt-python314-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-debug-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-devel-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-idle-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-libs-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-test-0:3.14.7-3.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-1.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-2.el7.x86_64", "CentOS-7:alt-python314-tkinter-0:3.14.7-3.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }