{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Commit: a12338aa2471be5a9d7a7f8ae19b271b2b5a5619-dirty", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1771328044", "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1771328044" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_python/alpinelinux3.22/advisories/2026/clsa-2026_1771328044.json" } ], "tracking": { "current_release_date": "2026-02-17T11:35:16Z", "generator": { "date": "2026-02-17T11:35:16Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1771328044", "initial_release_date": "2026-02-17T11:35:16Z", "revision_history": [ { "date": "2026-02-17T11:35:16Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Update of alt-python36" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Alpine Linux 3.22", "product": { "name": "Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22", "product_identification_helper": { "cpe": "cpe:2.3:o:alpinelinux:alpine_linux:3.22:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Alpine Linux" } ], "category": "vendor", "name": "Alpine Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "product_id": "alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pycache-pyc2@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "product_id": "alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pycache-pyc1@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-3.6.15-rr22.aarch64", "product_id": "alt-python36-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "product_id": "alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pycache-pyc0@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-debug-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-debug-3.6.15-rr22.aarch64", "product_id": "alt-python36-debug-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-debug@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-doc-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-doc-3.6.15-rr22.aarch64", "product_id": "alt-python36-doc-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-doc@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-gdbm-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-gdbm-3.6.15-rr22.aarch64", "product_id": "alt-python36-gdbm-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-gdbm@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-tkinter-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-tkinter-3.6.15-rr22.aarch64", "product_id": "alt-python36-tkinter-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-tkinter@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-tests-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-tests-3.6.15-rr22.aarch64", "product_id": "alt-python36-tests-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-tests@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-pyc-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-pyc-3.6.15-rr22.aarch64", "product_id": "alt-python36-pyc-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pyc@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-idle-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-idle-3.6.15-rr22.aarch64", "product_id": "alt-python36-idle-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-idle@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-dev-3.6.15-rr22.aarch64", "product": { "name": "alt-python36-dev-3.6.15-rr22.aarch64", "product_id": "alt-python36-dev-3.6.15-rr22.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-dev@3.6.15-rr22?arch=aarch64&os_name=alpine&os_version=3.22" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "product_id": "alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pycache-pyc2@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "product_id": "alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pycache-pyc1@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-3.6.15-rr22.x86_64", "product_id": "alt-python36-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "product_id": "alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pycache-pyc0@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-debug-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-debug-3.6.15-rr22.x86_64", "product_id": "alt-python36-debug-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-debug@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-doc-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-doc-3.6.15-rr22.x86_64", "product_id": "alt-python36-doc-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-doc@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-gdbm-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-gdbm-3.6.15-rr22.x86_64", "product_id": "alt-python36-gdbm-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-gdbm@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-tkinter-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-tkinter-3.6.15-rr22.x86_64", "product_id": "alt-python36-tkinter-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-tkinter@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-tests-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-tests-3.6.15-rr22.x86_64", "product_id": "alt-python36-tests-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-tests@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-pyc-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-pyc-3.6.15-rr22.x86_64", "product_id": "alt-python36-pyc-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-pyc@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-idle-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-idle-3.6.15-rr22.x86_64", "product_id": "alt-python36-idle-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-idle@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } }, { "category": "product_version", "name": "alt-python36-dev-3.6.15-rr22.x86_64", "product": { "name": "alt-python36-dev-3.6.15-rr22.x86_64", "product_id": "alt-python36-dev-3.6.15-rr22.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/alt-python36-dev@3.6.15-rr22?arch=x86_64&os_name=alpine&os_version=3.22" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pycache-pyc2-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pycache-pyc2-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pycache-pyc1-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pycache-pyc1-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pycache-pyc0-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pycache-pyc0-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-debug-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-debug-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-debug-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-debug-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-doc-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-doc-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-doc-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-doc-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-gdbm-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-gdbm-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-gdbm-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-gdbm-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-tkinter-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-tkinter-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-tkinter-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-tkinter-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-tests-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-tests-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-tests-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-tests-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pyc-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-pyc-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-pyc-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-pyc-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-idle-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-idle-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-idle-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-idle-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-dev-3.6.15-rr22.x86_64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.x86_64" }, "product_reference": "alt-python36-dev-3.6.15-rr22.x86_64", "relates_to_product_reference": "Alpine-Linux-3.22" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-dev-3.6.15-rr22.aarch64 as a component of Alpine Linux 3.22", "product_id": "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.aarch64" }, "product_reference": "alt-python36-dev-3.6.15-rr22.aarch64", "relates_to_product_reference": "Alpine-Linux-3.22" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-13837", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2025-13837" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b", "url": "https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70", "url": "https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba", "url": "https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba" }, { "category": "external", "summary": "https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb", "url": "https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/119342", "url": "https://github.com/python/cpython/issues/119342" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/119343", "url": "https://github.com/python/cpython/pull/119343" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/" } ], "release_date": "2025-12-01T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-17T11:34:06.876477Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1771328044", "product_ids": [ "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2026:1771328044" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-debug-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-dev-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-doc-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-gdbm-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-idle-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pyc-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc0-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc1-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-pycache-pyc2-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-tests-3.6.15-rr22.x86_64", "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.aarch64", "Alpine-Linux-3.22:alt-python36-tkinter-3.6.15-rr22.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }