Security
فارسی
All products

Red Hat Enterprise Linux 7/python3

Red Hat · Package
65 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pillow has an integer overflow when processing fontsCVE-2026-42308 · GHSA-WJX4-4JCJ-G98JVersion ranges need review. pillowExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
python: python: Arbitrary file write via tarfile extraction filter bypassCVE-2026-114583 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: Distrust compromised eMudhra intermediate certificates in Python ssl moduleCVE-2026-115557 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Misinterpretation of HTTP responses via invalid chunk parsingCVE-2026-103995 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: python: Security bypass via null byte truncation in socket.getaddrinfo()CVE-2026-116566 Red Hat Enterprise Linux 10/python3.12Red Hat Enterprise Linux 10/python3.14 Red Hat Medium No fix reported
python: tarfile module directory traversalCVE-2007-4559 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: mailcap: findmatch() function does not sanitize the second argumentCVE-2015-20107 Red Hat Enterprise Linux 7/python3Red Hat Software Collections/python27 Red Hat Medium No fix reported
python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.pyCVE-2019-9674 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Low No fix reported
python: CRLF injection via the host part of the url passed to urlopen()CVE-2019-18348 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: CRLF injection via HTTP request method in httplib/http.clientCVE-2020-26116 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Unsafe use of eval() on data retrieved via HTTP in the test suiteCVE-2020-27619 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.cCVE-2021-3177 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported
python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parametersCVE-2021-23336 Red Hat Ceph Storage 2/python-djangoRed Hat Ceph Storage 3/python-django Red Hat Medium No fix reported
python: Information disclosure via pydocCVE-2021-3426 Red Hat Enterprise Linux 7/python3Red Hat Quay 3/quay/quay-rhel8 Red Hat Medium No fix reported
python: urllib.parse does not sanitize URLs containing ASCII newline and tabsCVE-2022-0391 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: urllib: HTTP client possible infinite loop on a 100 Continue responseCVE-2021-3737 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Low No fix reported
python: urllib: Regular expression DoS in AbstractBasicAuthHandlerCVE-2021-3733 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: ftplib should not use the host from the PASV responseCVE-2021-4189 Red Hat Enterprise Linux 6/pythonRed Hat Enterprise Linux 7/python3 Red Hat Medium No fix reported
python: open redirection vulnerability in lib/http/server.py may lead to information disclosureCVE-2021-28861 Red Hat Enterprise Linux 7/python3Red Hat Enterprise Linux 8/python38 Red Hat Medium No fix reported
python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoSCVE-2020-10735 Red Hat Enterprise Linux 5/pythonRed Hat Enterprise Linux 6/python Red Hat Medium No fix reported