The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d494efe6a9 advisory.

    New prerelease version


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The     Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass     input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to     BaseCookie.output().(CVE-2026-3644)

    When folding a long comment in an email header containing exclusively unfoldable characters, the     parenthesis would not be preserved. This could be used for injecting headers into email messages where     addresses are user-controlled and not sanitized.(CVE-2025-11468)

    DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has     the same security model as open(). The documentation has been updated to clarify this point. There is no     vulnerability in the function if following the intended security model._x000D_
    _x000D_     pkgutil.get_data() did not validate the resource argument as documented, allowing path     traversals.(CVE-2026-3479)

    When an Expat parser with a registered ElementDeclHandler parses an inline_x000D_     document type definition containing a deeply nested content model a C stack_x000D_     overflow occurs.(CVE-2026-4224)

    User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in     the data URL mediatype.(CVE-2025-15282)

    The webbrowser.open() API would accept leading dashes in the URL which _x000D_     could be handled as command line options for certain web browsers. New _x000D_     behavior rejects leading dashes. Users are recommended to sanitize URLs _x000D_     prior to passing to webbrowser.open().(CVE-2026-4519)

    The 'tarfile' module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while     processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a     crafted tar archive being misinterpreted by the tarfile module compared to other     implementations.(CVE-2025-13462)

Tenable has extracted the preceding description block directly from the EulerOS python3 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f04915ebfd advisory.

    Backport fix for CVE-2026-4786.

    ----

    Backport fixes for CVE-2026-6100, CVE-2026-3479, CVE-2026-1502

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1933 advisory.

    The tarfile module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while     processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a     crafted tar archive being misinterpreted by the tarfile module compared to other implementations.
    (CVE-2025-13462)

    When calling base64.b64decode() or related functions the decoding process would stop after encountering     the first padded quad regardless of whether there was more information to be processed. This can lead to     data being accepted which may be processed differently by other implementations. Use validate=True to     enable stricter processing of base64 data. (CVE-2026-3446)

    pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.
    (CVE-2026-3479)

    `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding     protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this     vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch. (CVE-2026-7210)

    The ftpcp() function in Lib/ftplib.py was not updated whenCVE-2021-4189 was fixed. While makepasv() was     patched to replaceserver-supplied PASV host addresses with the actual peer address(getpeername()[0]),     ftpcp() still calls parse227() directly and passesthe raw attacker-controllable IP address and port to     target.sendport(). This patch is related to CVE-2021-4189. (CVE-2026-8328)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3227 advisory.

    The tarfile module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while     processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a     crafted tar archive being misinterpreted by the tarfile module compared to other implementations.
    (CVE-2025-13462)

    pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.
    (CVE-2026-3479)

    The webbrowser.open() API would accept leading dashes in the URL whichcould be handled as command line     options for certain web browsers. Newbehavior rejects leading dashes. Users are recommended to sanitize     URLsprior to passing to webbrowser.open(). (CVE-2026-4519)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1385-1 advisory.

    - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined     (bsc#1259611).
    - CVE-2026-3479: improper resource argument validation can allow path traversal (bsc#1259989).
    - CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).
    - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).
    - CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web     browser command       line option injection (bsc#1260026).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-13c6899032 advisory.

    Update to 3.13.13


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1354-1 advisory.

    - Update to v3.13.13
    - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined     (bsc#1259611).
    - CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass     (bsc#1259240).
    - CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989).
    - CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).
    - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).
    - CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web     browser command line option injection (bsc#1260026).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1349-1 advisory.

    - Updated to Python 3.11.15
    - CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation     is possible when expanding environment variables (bsc#1252974).
    - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively     unfoldable characters (bsc#1257029).
    - CVE-2025-12084: cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of     service (bsc#1254997).
    - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined     (bsc#1259611).
    - CVE-2025-13836: When reading an HTTP response from a server, if no read amount is specified, the default     behavior will be to use Content-Length (bsc#1254400).
    - CVE-2025-13837: When loading a plist file, the plistlib module reads data in size specified by the file     itself, meaning a malicious file can cause OOM and DoS issues (bsc#1254401).
    - CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046).
    - CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using     http.cookies.Morsel (bsc#1257031).
    - CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers     (bsc#1257042).
    - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in     `BytesGenerator` (bsc#1257181).
    - CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass     (bsc#1259240).
    - CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989).
    - CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).
    - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).
    - CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web     browser command line option injection (bsc#1260026).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1818-1 advisory.

    Security issues fixed:

    - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).
    - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that     could be       processed (bsc#1261970).
    - CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal     (bsc#1259989).
    - CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command     injection       (bsc#1262319).
    - CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS     (bsc#1262654).
    - CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`     when process is       under memory pressure(bsc#1262098).

    Other updates and bugfixes:

    - Rewrite structure of Python interpreter packages. `python3*` symbols should be now provided by real     python3 packages       and its subpackages instead of the virtual provides (bsc#1258364).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
310433	Fedora 44 : python3.15 (2026-d494efe6a9)	Nessus	Fedora Local Security Checks	2026/4/27	2026/4/27	high
323207	EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2507)	Nessus	Huawei Local Security Checks	2026/6/27	2026/6/27	high
310580	Fedora 44 : mingw-python3 (2026-f04915ebfd)	Nessus	Fedora Local Security Checks	2026/4/28	2026/4/28	critical
327397	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1933)	Nessus	Amazon Linux Local Security Checks	2026/7/16	2026/7/16	medium
306273	Amazon Linux 2 : python, --advisory ALAS2-2026-3227 (ALAS-2026-3227)	Nessus	Amazon Linux Local Security Checks	2026/4/14	2026/4/30	high
306868	SUSE SLES12 Security Update : python3 (SUSE-SU-2026:1385-1)	Nessus	SuSE Local Security Checks	2026/4/17	2026/4/17	high
310679	Fedora 42 : python3-docs / python3.13 (2026-13c6899032)	Nessus	Fedora Local Security Checks	2026/4/28	2026/4/28	medium
306689	SUSE SLED15 / SLES15 Security Update : python313 (SUSE-SU-2026:1354-1)	Nessus	SuSE Local Security Checks	2026/4/16	2026/4/16	high
306693	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2026:1349-1)	Nessus	SuSE Local Security Checks	2026/4/16	2026/4/16	high
315056	SUSE SLES15 Security Update : python39 (SUSE-SU-2026:1818-1)	Nessus	SuSE Local Security Checks	2026/5/16	2026/5/19	critical

检测

插件搜索

high

high

critical

medium

high

high

medium

high

high

critical