CVE-2026-87910
CVE-2026-87910 · tarfile hardlink fallback ignores custom extraction filter rejection via None
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None.
CVSS 5.7 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
python
- Versions
- ≥ 0, < 3.10.22: Affected (python)
- ≥ 3.11.0, < 3.11.17: Affected (python)
- ≥ 3.12.0, < 3.12.15: Affected (python)
- ≥ 3.13.0, < 3.13.16: Affected (python)
- ≥ 3.14.0, < 3.14.9: Affected (python)
- ≥ 3.15.0a1, < 3.15.0rc3: Affected (python)
Update to 3.10.22; Update to 3.11.17; Update to 3.12.15; Update to 3.13.16; Update to 3.14.9; Update to 3.15.0rc3
pypy3 Debian:13
- Versions
- 7.3.19+dfsg-2
- 7.3.20+dfsg-1
- 7.3.20+dfsg-2
- 7.3.20+dfsg-3
- 7.3.20+dfsg-4
- 7.3.21+dfsg-1
- 7.3.21+dfsg-2
- 7.3.21+dfsg-3
- 7.3.21+dfsg-4
- 7.3.22+dfsg-1
- 7.3.23+dfsg-1
- 7.3.23+dfsg-2
- 8.0.0+dfsg-1
- 8.0.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pypy3 Debian:14
- Versions
- 7.3.19+dfsg-2
- 7.3.20+dfsg-1
- 7.3.20+dfsg-2
- 7.3.20+dfsg-3
- 7.3.20+dfsg-4
- 7.3.21+dfsg-1
- 7.3.21+dfsg-2
- 7.3.21+dfsg-3
- 7.3.21+dfsg-4
- 7.3.22+dfsg-1
- 7.3.23+dfsg-1
- 7.3.23+dfsg-2
- 8.0.0+dfsg-1
- 8.0.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.13 Debian:13
- Versions
- 3.13.11-1
- 3.13.12-1
- 3.13.14-1
- 3.13.15-1
- 3.13.5-2
- 3.13.5-2+deb13u1
- 3.13.5-2+deb13u2
- 3.13.5-2+deb13u3
- 3.13.5-2+deb13u4
- 3.13.5-2+deb13u5
- 3.13.6-1
- 3.13.7-1
- 3.13.8-1
- 3.13.9-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.13 Debian:14
- Versions
- 3.13.11-1
- 3.13.12-1
- 3.13.14-1
- 3.13.15-1
- 3.13.5-2
- 3.13.6-1
- 3.13.7-1
- 3.13.8-1
- 3.13.9-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.14 Debian:14
- Versions
- 3.14.0-1
- 3.14.0-2
- 3.14.0-3
- 3.14.0-4
- 3.14.0-5
- 3.14.0~a7-1
- 3.14.0~b1-1
- 3.14.0~b2-1
- 3.14.0~b3-1
- 3.14.0~b4-1
- 3.14.0~rc1-1
- 3.14.0~rc2-1
- 3.14.0~rc3-1
- 3.14.2-1
- 3.14.3-1
- 3.14.3-2
- 3.14.3-3
- 3.14.3-4
- 3.14.3-5
- 3.14.4-1
- 3.14.4-2
- 3.14.5-1
- 3.14.5~rc1-1
- 3.14.6-1
- 3.14.7-1
- 3.14.7-2
- 3.14.7-3
- 3.14.7-4
- 3.14.7-5
- 3.14.8-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.15 Debian:14
- Versions
- 3.15.0~a8-1
- 3.15.0~a8-2
- 3.15.0~b1-1
- 3.15.0~b1-2
- 3.15.0~b1-3
- 3.15.0~b2-1
- 3.15.0~b3-1
- 3.15.0~b4-1
- 3.15.0~rc1-1
- 3.15.0~rc2-1
- 3.15.0~rc2-2
- 3.15.0~rc2-3
- Affected ranges
- ECOSYSTEM: < 3.15.0~rc3-1
Update to 3.15.0~rc3-1
python2.7 Ubuntu:Pro:14.04:LTS
- Versions
- 2.7.5-8ubuntu3
- 2.7.5-8ubuntu4
- 2.7.6-2
- 2.7.6-2ubuntu1
- 2.7.6-3
- 2.7.6-3ubuntu1
- 2.7.6-4
- 2.7.6-4ubuntu1
- 2.7.6-5
- 2.7.6-7
- 2.7.6-8
- 2.7.6-8ubuntu0.2
- 2.7.6-8ubuntu0.3
- 2.7.6-8ubuntu0.4
- 2.7.6-8ubuntu0.5
- 2.7.6-8ubuntu0.6+esm2
- 2.7.6-8ubuntu0.6+esm3
- 2.7.6-8ubuntu0.6+esm5
- 2.7.6-8ubuntu0.6+esm6
- 2.7.6-8ubuntu0.6+esm7
- 2.7.6-8ubuntu0.6+esm8
- 2.7.6-8ubuntu0.6+esm9
- 2.7.6-8ubuntu0.6+esm10
- 2.7.6-8ubuntu0.6+esm11
- 2.7.6-8ubuntu0.6+esm12
- 2.7.6-8ubuntu0.6+esm13
- 2.7.6-8ubuntu0.6+esm14
- 2.7.6-8ubuntu0.6+esm15
- 2.7.6-8ubuntu0.6+esm16
- 2.7.6-8ubuntu0.6+esm17
- 2.7.6-8ubuntu0.6+esm18
- 2.7.6-8ubuntu0.6+esm20
- 2.7.6-8ubuntu0.6+esm21
- 2.7.6-8ubuntu0.6+esm22
- 2.7.6-8ubuntu0.6+esm24
- 2.7.6-8ubuntu0.6+esm25
- 2.7.6-8ubuntu0.6+esm26
- 2.7.6-8ubuntu0.6+esm28
- 2.7.6-8ubuntu0.6+esm29
- 2.7.6-8ubuntu0.6+esm30
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.4 Ubuntu:Pro:14.04:LTS
- Versions
- 3.4~b1-0ubuntu3
- 3.4~b1-4ubuntu4
- 3.4~b1-4ubuntu6
- 3.4~b1-5ubuntu2
- 3.4~b2-1
- 3.4~b3-1ubuntu1
- 3.4~rc1-1build1
- 3.4~rc2-1
- 3.4~rc3-0ubuntu1
- 3.4.0-1
- 3.4.0-2ubuntu1
- 3.4.0-2ubuntu1.1
- 3.4.3-1ubuntu1~14.04.1
- 3.4.3-1ubuntu1~14.04.3
- 3.4.3-1ubuntu1~14.04.4
- 3.4.3-1ubuntu1~14.04.5
- 3.4.3-1ubuntu1~14.04.6
- 3.4.3-1ubuntu1~14.04.7
- 3.4.3-1ubuntu1~14.04.7+esm2
- 3.4.3-1ubuntu1~14.04.7+esm4
- 3.4.3-1ubuntu1~14.04.7+esm6
- 3.4.3-1ubuntu1~14.04.7+esm7
- 3.4.3-1ubuntu1~14.04.7+esm8
- 3.4.3-1ubuntu1~14.04.7+esm10
- 3.4.3-1ubuntu1~14.04.7+esm11
- 3.4.3-1ubuntu1~14.04.7+esm12
- 3.4.3-1ubuntu1~14.04.7+esm13
- 3.4.3-1ubuntu1~14.04.7+esm14
- 3.4.3-1ubuntu1~14.04.7+esm15
- 3.4.3-1ubuntu1~14.04.7+esm16
- 3.4.3-1ubuntu1~14.04.7+esm17
- 3.4.3-1ubuntu1~14.04.7+esm19
- 3.4.3-1ubuntu1~14.04.7+esm20
- 3.4.3-1ubuntu1~14.04.7+esm21
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.5 Ubuntu:Pro:14.04:LTS
- Versions
- 3.5.2-2ubuntu0~16.04.4~14.04.1
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm3
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm4
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm5
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm6
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm7
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm8
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm9
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm10
- 3.5.2-2ubuntu0~16.04.4~14.04.1+esm11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python2.7 Ubuntu:Pro:16.04:LTS
- Versions
- 2.7.10-4ubuntu1
- 2.7.10-4ubuntu2
- 2.7.11-2
- 2.7.11-3
- 2.7.11-4
- 2.7.11-6
- 2.7.11-7
- 2.7.11-7ubuntu1
- 2.7.12-1~16.04
- 2.7.12-1ubuntu0~16.04.1
- 2.7.12-1ubuntu0~16.04.2
- 2.7.12-1ubuntu0~16.04.3
- 2.7.12-1ubuntu0~16.04.4
- 2.7.12-1ubuntu0~16.04.8
- 2.7.12-1ubuntu0~16.04.9
- 2.7.12-1ubuntu0~16.04.11
- 2.7.12-1ubuntu0~16.04.12
- 2.7.12-1ubuntu0~16.04.13
- 2.7.12-1ubuntu0~16.04.14
- 2.7.12-1ubuntu0~16.04.16
- 2.7.12-1ubuntu0~16.04.18
- 2.7.12-1ubuntu0~16.04.18+esm1
- 2.7.12-1ubuntu0~16.04.18+esm2
- 2.7.12-1ubuntu0~16.04.18+esm3
- 2.7.12-1ubuntu0~16.04.18+esm4
- 2.7.12-1ubuntu0~16.04.18+esm5
- 2.7.12-1ubuntu0~16.04.18+esm6
- 2.7.12-1ubuntu0~16.04.18+esm7
- 2.7.12-1ubuntu0~16.04.18+esm8
- 2.7.12-1ubuntu0~16.04.18+esm9
- 2.7.12-1ubuntu0~16.04.18+esm10
- 2.7.12-1ubuntu0~16.04.18+esm11
- 2.7.12-1ubuntu0~16.04.18+esm12
- 2.7.12-1ubuntu0~16.04.18+esm13
- 2.7.12-1ubuntu0~16.04.18+esm15
- 2.7.12-1ubuntu0~16.04.18+esm16
- 2.7.12-1ubuntu0~16.04.18+esm17
- 2.7.12-1ubuntu0~16.04.18+esm18
- 2.7.12-1ubuntu0~16.04.18+esm19
- 2.7.12-1ubuntu0~16.04.18+esm20
- 2.7.12-1ubuntu0~16.04.18+esm21
- 2.7.12-1ubuntu0~16.04.18+esm22
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.5 Ubuntu:Pro:16.04:LTS
- Versions
- 3.5.0-3
- 3.5.0-3ubuntu1
- 3.5.1~rc1-2ubuntu1
- 3.5.1-1
- 3.5.1-2
- 3.5.1-3
- 3.5.1-5
- 3.5.1-6ubuntu1
- 3.5.1-6ubuntu2
- 3.5.1-9ubuntu1
- 3.5.1-10
- 3.5.2-2~16.01
- 3.5.2-2~16.04
- 3.5.2-2ubuntu0~16.04.1
- 3.5.2-2ubuntu0~16.04.2
- 3.5.2-2ubuntu0~16.04.3
- 3.5.2-2ubuntu0~16.04.4
- 3.5.2-2ubuntu0~16.04.5
- 3.5.2-2ubuntu0~16.04.8
- 3.5.2-2ubuntu0~16.04.9
- 3.5.2-2ubuntu0~16.04.10
- 3.5.2-2ubuntu0~16.04.11
- 3.5.2-2ubuntu0~16.04.12
- 3.5.2-2ubuntu0~16.04.13
- 3.5.2-2ubuntu0~16.04.13+esm1
- 3.5.2-2ubuntu0~16.04.13+esm2
- 3.5.2-2ubuntu0~16.04.13+esm3
- 3.5.2-2ubuntu0~16.04.13+esm5
- 3.5.2-2ubuntu0~16.04.13+esm6
- 3.5.2-2ubuntu0~16.04.13+esm7
- 3.5.2-2ubuntu0~16.04.13+esm8
- 3.5.2-2ubuntu0~16.04.13+esm9
- 3.5.2-2ubuntu0~16.04.13+esm10
- 3.5.2-2ubuntu0~16.04.13+esm11
- 3.5.2-2ubuntu0~16.04.13+esm12
- 3.5.2-2ubuntu0~16.04.13+esm13
- 3.5.2-2ubuntu0~16.04.13+esm14
- 3.5.2-2ubuntu0~16.04.13+esm15
- 3.5.2-2ubuntu0~16.04.13+esm16
- 3.5.2-2ubuntu0~16.04.13+esm17
- 3.5.2-2ubuntu0~16.04.13+esm18
- 3.5.2-2ubuntu0~16.04.13+esm19
- 3.5.2-2ubuntu0~16.04.13+esm20
- 3.5.2-2ubuntu0~16.04.13+esm21
- 3.5.2-2ubuntu0~16.04.13+esm22
- 3.5.2-2ubuntu0~16.04.13+esm23
- 3.5.2-2ubuntu0~16.04.13+esm24
- 3.5.2-2ubuntu0~16.04.13+esm25
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python2.7 Ubuntu:Pro:18.04:LTS
- Versions
- 2.7.14-2ubuntu2
- 2.7.14-4
- 2.7.14-6
- 2.7.14-7
- 2.7.14-8
- 2.7.15~rc1-1
- 2.7.15~rc1-1ubuntu0.1
- 2.7.15-4ubuntu4~18.04
- 2.7.15-4ubuntu4~18.04.1
- 2.7.15-4ubuntu4~18.04.2
- 2.7.17-1~18.04
- 2.7.17-1~18.04ubuntu1
- 2.7.17-1~18.04ubuntu1.1
- 2.7.17-1~18.04ubuntu1.2
- 2.7.17-1~18.04ubuntu1.3
- 2.7.17-1~18.04ubuntu1.5
- 2.7.17-1~18.04ubuntu1.6
- 2.7.17-1~18.04ubuntu1.7
- 2.7.17-1~18.04ubuntu1.8
- 2.7.17-1~18.04ubuntu1.10
- 2.7.17-1~18.04ubuntu1.11
- 2.7.17-1~18.04ubuntu1.13
- 2.7.17-1~18.04ubuntu1.13+esm1
- 2.7.17-1~18.04ubuntu1.13+esm2
- 2.7.17-1~18.04ubuntu1.13+esm3
- 2.7.17-1~18.04ubuntu1.13+esm4
- 2.7.17-1~18.04ubuntu1.13+esm5
- 2.7.17-1~18.04ubuntu1.13+esm6
- 2.7.17-1~18.04ubuntu1.13+esm7
- 2.7.17-1~18.04ubuntu1.13+esm8
- 2.7.17-1~18.04ubuntu1.13+esm10
- 2.7.17-1~18.04ubuntu1.13+esm11
- 2.7.17-1~18.04ubuntu1.13+esm12
- 2.7.17-1~18.04ubuntu1.13+esm13
- 2.7.17-1~18.04ubuntu1.13+esm14
- 2.7.17-1~18.04ubuntu1.13+esm15
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.6 Ubuntu:Pro:18.04:LTS
- Versions
- 3.6.3-1ubuntu1
- 3.6.4~rc1-1
- 3.6.4~rc1-2
- 3.6.4-1
- 3.6.4-2
- 3.6.4-3build1
- 3.6.4-4
- 3.6.5~rc1-1
- 3.6.5-3
- 3.6.6-1~18.04
- 3.6.7-1~18.04
- 3.6.8-1~18.04.1
- 3.6.8-1~18.04.2
- 3.6.8-1~18.04.3
- 3.6.9-1~18.04
- 3.6.9-1~18.04ubuntu1
- 3.6.9-1~18.04ubuntu1.1
- 3.6.9-1~18.04ubuntu1.3
- 3.6.9-1~18.04ubuntu1.4
- 3.6.9-1~18.04ubuntu1.6
- 3.6.9-1~18.04ubuntu1.7
- 3.6.9-1~18.04ubuntu1.8
- 3.6.9-1~18.04ubuntu1.9
- 3.6.9-1~18.04ubuntu1.10
- 3.6.9-1~18.04ubuntu1.12
- 3.6.9-1~18.04ubuntu1.13
- 3.6.9-1~18.04ubuntu1.13+esm1
- 3.6.9-1~18.04ubuntu1.13+esm2
- 3.6.9-1~18.04ubuntu1.13+esm3
- 3.6.9-1~18.04ubuntu1.13+esm4
- 3.6.9-1~18.04ubuntu1.13+esm5
- 3.6.9-1~18.04ubuntu1.13+esm6
- 3.6.9-1~18.04ubuntu1.13+esm7
- 3.6.9-1~18.04ubuntu1.13+esm8
- 3.6.9-1~18.04ubuntu1.13+esm9
- 3.6.9-1~18.04ubuntu1.13+esm10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.7 Ubuntu:Pro:18.04:LTS
- Versions
- 3.7.0~a2-1
- 3.7.0~a3-1
- 3.7.0~a3-2
- 3.7.0~a3-3
- 3.7.0~a4-1
- 3.7.0~b1-1
- 3.7.0~b1-1build1
- 3.7.0~b2-1
- 3.7.0~b3-1
- 3.7.0-1~18.04
- 3.7.1-1~18.04
- 3.7.3-2~18.04.1
- 3.7.5-2~18.04
- 3.7.5-2~18.04.4
- 3.7.5-2ubuntu1~18.04.2
- 3.7.5-2ubuntu1~18.04.2+esm1
- 3.7.5-2ubuntu1~18.04.2+esm2
- 3.7.5-2ubuntu1~18.04.2+esm3
- 3.7.5-2ubuntu1~18.04.2+esm4
- 3.7.5-2ubuntu1~18.04.2+esm5
- 3.7.5-2ubuntu1~18.04.2+esm6
- 3.7.5-2ubuntu1~18.04.2+esm7
- 3.7.5-2ubuntu1~18.04.2+esm8
- 3.7.5-2ubuntu1~18.04.2+esm9
- 3.7.5-2ubuntu1~18.04.2+esm10
- 3.7.5-2ubuntu1~18.04.2+esm11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.8 Ubuntu:Pro:18.04:LTS
- Versions
- 3.8.0-3~18.04
- 3.8.0-3~18.04.1
- 3.8.0-3ubuntu1~18.04.2
- 3.8.0-3ubuntu1~18.04.2+esm1
- 3.8.0-3ubuntu1~18.04.2+esm2
- 3.8.0-3ubuntu1~18.04.2+esm3
- 3.8.0-3ubuntu1~18.04.2+esm4
- 3.8.0-3ubuntu1~18.04.2+esm5
- 3.8.0-3ubuntu1~18.04.2+esm6
- 3.8.0-3ubuntu1~18.04.2+esm7
- 3.8.0-3ubuntu1~18.04.2+esm8
- 3.8.0-3ubuntu1~18.04.2+esm9
- 3.8.0-3ubuntu1~18.04.2+esm10
- 3.8.0-3ubuntu1~18.04.2+esm11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.8 Ubuntu:Pro:20.04:LTS
- Versions
- 3.8.0-1
- 3.8.0-2
- 3.8.0-3
- 3.8.0-4
- 3.8.0-5
- 3.8.1-2ubuntu3
- 3.8.2~rc1-1ubuntu1
- 3.8.2-1
- 3.8.2-1ubuntu1
- 3.8.2-1ubuntu1.1
- 3.8.2-1ubuntu1.2
- 3.8.5-1~20.04
- 3.8.5-1~20.04.2
- 3.8.5-1~20.04.3
- 3.8.10-0ubuntu1~20.04
- 3.8.10-0ubuntu1~20.04.1
- 3.8.10-0ubuntu1~20.04.2
- 3.8.10-0ubuntu1~20.04.4
- 3.8.10-0ubuntu1~20.04.5
- 3.8.10-0ubuntu1~20.04.6
- 3.8.10-0ubuntu1~20.04.7
- 3.8.10-0ubuntu1~20.04.8
- 3.8.10-0ubuntu1~20.04.9
- 3.8.10-0ubuntu1~20.04.10
- 3.8.10-0ubuntu1~20.04.11
- 3.8.10-0ubuntu1~20.04.12
- 3.8.10-0ubuntu1~20.04.13
- 3.8.10-0ubuntu1~20.04.14
- 3.8.10-0ubuntu1~20.04.15
- 3.8.10-0ubuntu1~20.04.16
- 3.8.10-0ubuntu1~20.04.17
- 3.8.10-0ubuntu1~20.04.18
- 3.8.10-0ubuntu1~20.04.18+esm1
- 3.8.10-0ubuntu1~20.04.18+esm2
- 3.8.10-0ubuntu1~20.04.18+esm3
- 3.8.10-0ubuntu1~20.04.18+esm4
- 3.8.10-0ubuntu1~20.04.18+esm5
- 3.8.10-0ubuntu1~20.04.18+esm6
- 3.8.10-0ubuntu1~20.04.18+esm7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pypy3 Ubuntu:20.04:LTS
- Versions
- 7.1.1+dfsg-1
- 7.2.0+dfsg-1
- 7.3.0+dfsg-1
- 7.3.0+dfsg-1ubuntu2
- 7.3.0+dfsg-1ubuntu3
- 7.3.1+dfsg-4
- 7.3.1+dfsg-4ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python2.7 Ubuntu:Pro:20.04:LTS
- Versions
- 2.7.17~rc1-1
- 2.7.17-1
- 2.7.17-1ubuntu5
- 2.7.17-1ubuntu6
- 2.7.18~rc1-2
- 2.7.18-1~20.04
- 2.7.18-1~20.04.1
- 2.7.18-1~20.04.1+esm1
- 2.7.18-1~20.04.3
- 2.7.18-1~20.04.3+esm1
- 2.7.18-1~20.04.4
- 2.7.18-1~20.04.4+esm1
- 2.7.18-1~20.04.4+esm2
- 2.7.18-1~20.04.4+esm3
- 2.7.18-1~20.04.5
- 2.7.18-1~20.04.5+esm1
- 2.7.18-1~20.04.5+esm2
- 2.7.18-1~20.04.6
- 2.7.18-1~20.04.6+esm1
- 2.7.18-1~20.04.7
- 2.7.18-1~20.04.7+esm3
- 2.7.18-1~20.04.7+esm4
- 2.7.18-1~20.04.7+esm6
- 2.7.18-1~20.04.7+esm7
- 2.7.18-1~20.04.7+esm8
- 2.7.18-1~20.04.7+esm9
- 2.7.18-1~20.04.7+esm10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.9 Ubuntu:Pro:20.04:LTS
- Versions
- 3.9.0~rc1-1~20.04
- 3.9.0-5~20.04
- 3.9.5-3~20.04.1
- 3.9.5-3ubuntu0~20.04.1
- 3.9.5-3ubuntu0~20.04.1+esm1
- 3.9.5-3ubuntu0~20.04.1+esm2
- 3.9.5-3ubuntu0~20.04.1+esm3
- 3.9.5-3ubuntu0~20.04.1+esm4
- 3.9.5-3ubuntu0~20.04.1+esm5
- 3.9.5-3ubuntu0~20.04.1+esm6
- 3.9.5-3ubuntu0~20.04.1+esm7
- 3.9.5-3ubuntu0~20.04.1+esm8
- 3.9.5-3ubuntu0~20.04.1+esm9
- 3.9.5-3ubuntu0~20.04.1+esm10
- 3.9.5-3ubuntu0~20.04.1+esm11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pypy3 Ubuntu:22.04:LTS
- Versions
- 7.3.5+dfsg-2
- 7.3.7+dfsg-1
- 7.3.7+dfsg-4
- 7.3.7+dfsg-5
- 7.3.8+dfsg-2
- 7.3.9+dfsg-1
- 7.3.9+dfsg-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.10 Ubuntu:22.04:LTS
- Versions
- 3.10.0-2
- 3.10.0-3
- 3.10.0-4
- 3.10.0-5
- 3.10.0-5build1
- 3.10.1-1
- 3.10.1-2
- 3.10.2-1
- 3.10.2-5
- 3.10.2-7
- 3.10.3-1
- 3.10.4-3
- 3.10.4-3ubuntu0.1
- 3.10.6-1~22.04
- 3.10.6-1~22.04.1
- 3.10.6-1~22.04.2
- 3.10.6-1~22.04.2ubuntu1
- 3.10.6-1~22.04.2ubuntu1.1
- 3.10.12-1~22.04.2
- 3.10.12-1~22.04.3
- 3.10.12-1~22.04.4
- 3.10.12-1~22.04.5
- 3.10.12-1~22.04.6
- 3.10.12-1~22.04.7
- 3.10.12-1~22.04.8
- 3.10.12-1~22.04.9
- 3.10.12-1~22.04.10
- 3.10.12-1~22.04.11
- 3.10.12-1~22.04.12
- 3.10.12-1~22.04.13
- 3.10.12-1~22.04.14
- 3.10.12-1~22.04.15
- 3.10.12-1~22.04.16
- 3.10.12-1~22.04.17
- 3.10.12-1~22.04.18
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python2.7 Ubuntu:Pro:22.04:LTS
- Versions
- 2.7.18-8build1
- 2.7.18-13
- 2.7.18-13ubuntu1
- 2.7.18-13ubuntu1.1
- 2.7.18-13ubuntu1.1+esm2
- 2.7.18-13ubuntu1.2
- 2.7.18-13ubuntu1.2+esm1
- 2.7.18-13ubuntu1.2+esm2
- 2.7.18-13ubuntu1.2+esm3
- 2.7.18-13ubuntu1.3
- 2.7.18-13ubuntu1.3+esm1
- 2.7.18-13ubuntu1.4
- 2.7.18-13ubuntu1.4+esm1
- 2.7.18-13ubuntu1.5
- 2.7.18-13ubuntu1.5+esm2
- 2.7.18-13ubuntu1.5+esm3
- 2.7.18-13ubuntu1.5+esm5
- 2.7.18-13ubuntu1.5+esm6
- 2.7.18-13ubuntu1.5+esm7
- 2.7.18-13ubuntu1.5+esm8
- 2.7.18-13ubuntu1.5+esm9
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
python3.11 Ubuntu:Pro:22.04:LTS
- Versions
- 3.11.0~rc1-1~22.04
- 3.11.0~rc1-1~22.04.1~esm1
- 3.11.0~rc1-1~22.04.1~esm2
- 3.11.0~rc1-1~22.04.1~esm3
- 3.11.0~rc1-1~22.04.1~esm4
- 3.11.0~rc1-1~22.04.1~esm5
- 3.11.0~rc1-1~22.04.1~esm6
- 3.11.0~rc1-1~22.04.1~esm7
- 3.11.0~rc1-1~22.04.1~esm8
- 3.11.0~rc1-1~22.04.1~esm9
- 3.11.0~rc1-1~22.04.1
- 3.11.0~rc1-1~22.04.1+esm1
- 3.11.0~rc1-1~22.04.1+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://mail.python.org/archives/list/[email protected]/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/
- https://github.com/python/cpython/pull/157266
- https://github.com/python/cpython/issues/157265
- https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b
- https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2
- https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955
- https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036
- https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f
- https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3
- https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5
- https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0
- http://www.openwall.com/lists/oss-security/2026/09/11/8
- https://nvd.nist.gov/vuln/detail/CVE-2026-87910