{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-82049: resolve a hard link's target with os.path.realpath() before\n creating the link, so extracting a hard link to a symlink stored deeper in\n the archive cannot relocate that symlink to a shallower path where its\n relative target escapes the destination directory\n- CVE-2026-11940: re-filter the fallback member when hard link extraction\n falls back to extracting from the archive, and filter it under the link's\n own name, so a hard link to a deeper symlink cannot recreate that symlink\n at a shallower path outside the destination. Carries the CVE-2025-4330\n fallback-filtering prerequisite (LinkFallbackError and\n makelink_with_filter), which this package did not have. Skip the member\n when the filter returns None for the link's own name, so a filter that\n skips rejected members cannot be bypassed the same way (CVE-2026-87910)\n- CVE-2025-4435: skip a member the extraction filter rejects instead of\n extracting it unfiltered when TarFile.errorlevel is 0", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/amazonlinux2els/advisories/2026/clsa-2026_1792076823.json" } ], "tracking": { "current_release_date": "2026-10-17T12:54:24Z", "generator": { "date": "2026-10-17T12:54:24Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792076823", "initial_release_date": "2026-10-15T15:08:18Z", "revision_history": [ { "date": "2026-10-15T15:08:18Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-17T12:54:24Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "python: Fix of 2 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "Amazon-Linux-2", "product_identification_helper": { "cpe": "cpe:2.3:o:amazon:amazon_linux:2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Amazon Linux" } ], "category": "vendor", "name": "Amazon Web Services, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product": { "name": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_id": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_id": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.20.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.19.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.18.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "product_id": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.18.tuxcare.els2?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/tkinter@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } }, { "category": "product_version", "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-debug@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } }, { "category": "product_version", "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-devel@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } }, { "category": "product_version", "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-libs@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } }, { "category": "product_version", "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-tools@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } }, { "category": "product_version", "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } }, { "category": "product_version", "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_id": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python-test@2.7.18-1.amzn2.0.22.tuxcare.els4?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" }, { "category": "default_component_of", "full_product_name": { "name": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64 as a component of Amazon Linux 2", "product_id": "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64" }, "product_reference": "python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "relates_to_product_reference": "Amazon-Linux-2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-4435", "cwe": { "id": "CWE-682", "name": "Incorrect Calculation" }, "notes": [ { "category": "description", "text": "When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "known_affected": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4435" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da", "url": "https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9", "url": "https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a", "url": "https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e", "url": "https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a", "url": "https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a", "url": "https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01", "url": "https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1", "url": "https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/135034", "url": "https://github.com/python/cpython/issues/135034" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/135037", "url": "https://github.com/python/cpython/pull/135037" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/" } ], "release_date": "2025-06-03T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T15:07:04.873721Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823" }, { "category": "none_available", "date": "2025-06-03T13:15:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-4330", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "known_affected": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4330" }, { "category": "external", "summary": "https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f", "url": "https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da", "url": "https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9", "url": "https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a", "url": "https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e", "url": "https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a", "url": "https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a", "url": "https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01", "url": "https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1", "url": "https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/135034", "url": "https://github.com/python/cpython/issues/135034" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/135037", "url": "https://github.com/python/cpython/pull/135037" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/" } ], "release_date": "2025-06-03T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T15:07:04.873721Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823" }, { "category": "none_available", "date": "2025-06-03T13:15:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-11940", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "known_affected": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-11940" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5", "url": "https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f", "url": "https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df", "url": "https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde", "url": "https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c", "url": "https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9", "url": "https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877", "url": "https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/151558", "url": "https://github.com/python/cpython/issues/151558" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/151559", "url": "https://github.com/python/cpython/pull/151559" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/" } ], "release_date": "2026-06-23T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T15:07:04.873721Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823" }, { "category": "none_available", "date": "2026-06-23T17:16:00Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-82049", "cwe": { "id": "CWE-59", "name": "Improper Link Resolution Before File Access ('Link Following')" }, "notes": [ { "category": "description", "text": "In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "known_affected": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-82049" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913", "url": "https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771", "url": "https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca", "url": "https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3", "url": "https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d", "url": "https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8", "url": "https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e", "url": "https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c", "url": "https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/157190", "url": "https://github.com/python/cpython/issues/157190" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/157191", "url": "https://github.com/python/cpython/pull/157191" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/09/14/27", "url": "http://www.openwall.com/lists/oss-security/2026/09/14/27" } ], "release_date": "2026-09-14T19:14:03Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T15:07:04.873721Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.i686", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792076823" }, { "category": "none_available", "date": "2026-09-14T19:14:03Z", "details": "Affected", "product_ids": [ "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-debug-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-devel-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.i686", "Amazon-Linux-2:python-libs-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-test-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:python-tools-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64", "Amazon-Linux-2:tkinter-0:2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }