Skip to content
Multiple Python Versions in Fedora Address Tar and SSL Vulnerabilities

Multiple Python Versions in Fedora Address Tar and SSL Vulnerabilities

First seen 5 Nov 2026, 16:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 16:20 UTC
  • •Critical vulnerabilities in multiple Python versions affect Fedora systems.
  • •CVE-2026-114583 allows arbitrary file writes, while CVE-2026-115557 addresses SSL trust issues.
  • •Users should upgrade to patched versions immediately to mitigate risks.

Fedora has released updates for several Python versions (3.11, 3.13, 3.14, and 3.15) to address vulnerabilities related to tar file extraction and SSL certificate handling. CVE-2026-114583 allows arbitrary file writes via a tar filter, while CVE-2026-115557 distrusts compromised intermediate certificates, posing a significant risk to users. The vulnerabilities affect multiple Fedora releases, including Fedora 43 and 44. The updates were published on October 22 and 24, 2026, with patches available via the dnf update program. Users are urged to upgrade to the latest versions to mitigate these risks. The CVSS scores for these vulnerabilities indicate a medium to severity level, highlighting the need for immediate action.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-29
CVE-2026-12345 published
Arbitrary file deletion via race condition during temporary directory cleanup was disclosed.
Linuxsecurity
2026-10-22
CVE-2026-114583 published
Vulnerability allowing arbitrary file writes via tar filter was disclosed.
Linuxsecurity
2026-10-24
CVE-2026-115557 published
Vulnerability regarding distrust of compromised intermediate certificates was disclosed.
Linuxsecurity
2026-11-04
Fedora 44 Python updates released
Updates for Python 3.14.10 were released to address critical vulnerabilities.
Linuxsecurity
2026-11-05
Fedora 43 Python updates released
Updates for Python 3.11, 3.13, and 3.15 were released to address critical vulnerabilities.
Linuxsecurity

More articles in this cluster (5)

Following this threat?

Track CVE-2026-114583 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

Which Python versions are affected?
Affected versions include Python 3.11, 3.13, 3.14, and 3.15 in Fedora.
What should I do to protect my systems?
Upgrade to the latest patched versions of Python as soon as possible.
Are these vulnerabilities actively exploited?
No confirmed exploitation has been reported for these vulnerabilities at this time.