Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.
The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.14-debugUpgrade python3.12-libsUpgrade python3.14-libsUpgrade python3.12Upgrade python3-idleUpgrade python3.11-libsUpgrade python3Upgrade python3.14-freethreading-debugUpgrade python3.12-debugUpgrade python3.14-freethreading-idleUpgrade python3.14-idleUpgrade python3.12-idleUpgrade platform-python-develUpgrade python3.14-freethreading-tkinterUpgrade python3-develUpgrade python3-tkinterUpgrade python3.11-idleUpgrade python3-debugUpgrade python3.14-tkinterUpgrade python3.12-testUpgrade python3.14-freethreadingUpgrade python3.12-tkinterUpgrade python3.11-tkinterUpgrade python3.14-develUpgrade python3-libsUpgrade python3.11-debugUpgrade platform-python-debugUpgrade python3.11-develUpgrade python3-testUpgrade python3.14-freethreading-testUpgrade python3.14-freethreading-develUpgrade python-unversioned-commandUpgrade python3.14Upgrade python3.14-testUpgrade python3.12-rpm-macrosUpgrade platform-pythonUpgrade python3.12-develUpgrade python3.11-rpm-macrosUpgrade python3.11-testUpgrade python3.14-freethreading-libsUpgrade python3.11 | Apr 29, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade python3 | Aug 17, 2026 | Apr 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python3-toolsUpgrade python-toolsUpgrade python3-testUpgrade python-testUpgrade pythonUpgrade python3Upgrade tkinterUpgrade python-libsUpgrade python3-tkinterUpgrade python-debuginfoUpgrade python3-develUpgrade python-debugUpgrade python3-debuginfoUpgrade python3-debugUpgrade python-develUpgrade python3-libs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.11-testUpgrade python3.13-debugsourceUpgrade python3.14-freethreading-idleUpgrade python3.14-freethreading-tkinterUpgrade python3-libsUpgrade python3.14-debugUpgrade python3.9-debugsourceUpgrade python3.12-debugsourceUpgrade python3.13-freethreading-debugUpgrade python3.13Upgrade python3.11-libsUpgrade python3.14Upgrade python3-develUpgrade python3.12-testUpgrade python3-idleUpgrade python3.11Upgrade python3.11-tkinterUpgrade python3.13-develUpgrade python3.14-freethreading-testUpgrade python3.11-debugUpgrade python3.13-libsUpgrade python-unversioned-commandUpgrade python3.13-testUpgrade python3.13-idleUpgrade python3.11-develUpgrade python3.11-debuginfoUpgrade python3.12-develUpgrade python3.9-debuginfoUpgrade python3.13-debugUpgrade python3.13-freethreadingUpgrade python3.13-tkinterUpgrade python3-tkinterUpgrade python3.12-tkinterUpgrade python3.13-debuginfoUpgrade python3.14-freethreading-libsUpgrade python3.14-develUpgrade python3Upgrade python3.14-testUpgrade python3.14-libsUpgrade python3.12-debugUpgrade python3.12-debuginfoUpgrade python3-debugUpgrade python3-testUpgrade python3.14-freethreadingUpgrade python3.12-idleUpgrade python3.12Upgrade python3.11-idleUpgrade python3.14-freethreading-debugUpgrade python3.14-debugsourceUpgrade python3.14-tkinterUpgrade python3.14-freethreading-develUpgrade python3.14-debuginfoUpgrade python3.14-idleUpgrade python3.12-libsUpgrade python3.11-debugsource | May 4, 2026 | Apr 13, 2026 |
| Debian | — | Upgrade python3.13Upgrade python3.9Upgrade python3.11 | Apr 16, 2026 | Apr 16, 2026 |
| Freebsd | — | Upgrade python312Upgrade python314Upgrade python313Upgrade python311Upgrade python310Upgrade python313t | Apr 17, 2026 | Apr 13, 2026 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory20 | Jul 15, 2026 | Jul 14, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Oracle_linux | — | Upgrade platform-pythonUpgrade python3.12-idleUpgrade python3.14-develUpgrade python3.11-rpm-macrosUpgrade python3.11-testUpgrade python3.11Upgrade python3.14Upgrade python3.12-rpm-macrosUpgrade python3.12Upgrade python3.12-testUpgrade python3.14-freethreading-idleUpgrade python-unversioned-commandUpgrade python3.14-freethreading-testUpgrade python3.12-develUpgrade python3.14-freethreading-tkinterUpgrade python3-testUpgrade python3.14-freethreading-debugUpgrade python3.11-tkinterUpgrade python3.12-tkinterUpgrade python3.11-develUpgrade python3.12-libsUpgrade python3.14-libsUpgrade python3.14-tkinterUpgrade python3-tkinterUpgrade python3.12-debugUpgrade python3-idleUpgrade python3-debugUpgrade platform-python-develUpgrade python3Upgrade python3-develUpgrade python3-libsUpgrade python3.14-freethreading-libsUpgrade platform-python-debugUpgrade python3.11-debugUpgrade python3.14-freethreadingUpgrade python3.14-testUpgrade python3.14-idleUpgrade python3.14-debugUpgrade python3.14-freethreading-develUpgrade python3.11-idleUpgrade python3.11-libs | Apr 29, 2026 | Apr 13, 2026 |
| Redhat_linux | — | Upgrade python3-debugUpgrade python3.9-debuginfoUpgrade python3.11-rpm-macrosUpgrade python3.11-debugUpgrade platform-python-develUpgrade python3.12Upgrade python3.14-debuginfoUpgrade python3-tkinterUpgrade python3.11-idleUpgrade python3.14-freethreading-idleUpgrade python3.14-tkinterUpgrade python3-libsUpgrade python3.14-freethreading-tkinterNo solution existsUpgrade python3.14-debugsourceUpgrade python3-debuginfoUpgrade python3-develUpgrade python3.12-debuginfoUpgrade python3.12-tkinterUpgrade python3-idleUpgrade python3.11-develUpgrade python3-debugsourceUpgrade python3.12-idleUpgrade python3.14Upgrade python3-testUpgrade python3.12-debugsourceUpgrade python3.14-freethreading-testUpgrade python3.14-freethreadingUpgrade python3.14-testUpgrade python3.11Upgrade python3.11-debuginfoUpgrade python3.12-rpm-macrosUpgrade python-unversioned-commandUpgrade python3.14-libsUpgrade python3.11-libsUpgrade python3.11-testUpgrade python3.14-idleUpgrade python3.14-develUpgrade python3.12-libsUpgrade python3.12-testUpgrade python3.12-develUpgrade python3.14-freethreading-debugUpgrade python3.9-debugsourceUpgrade python3.12-debugUpgrade python3.14-freethreading-develUpgrade python3.11-tkinterUpgrade platform-pythonUpgrade python3.11-debugsourceUpgrade python3Upgrade platform-python-debugUpgrade python3.14-freethreading-libsUpgrade python3.14-debug | Apr 28, 2026 | Apr 13, 2026 |
| Rocky_linux | — | Upgrade python3.11-develUpgrade python3.12-debugsourceUpgrade platform-pythonUpgrade python3.14-testUpgrade python3.14-debuginfoUpgrade python3.14-idleUpgrade python3.14-freethreading-testUpgrade python3.12-debuginfoUpgrade python3.11Upgrade python3Upgrade python3-tkinterUpgrade python3.11-testUpgrade python3.14-freethreading-idleUpgrade python3.14Upgrade python3.12Upgrade python3.14-debugsourceUpgrade python3.11-tkinterUpgrade python3.12-tkinterUpgrade python3.14-libsUpgrade python3.14-freethreading-libsUpgrade python3.11-debugsourceUpgrade python3.11-debugUpgrade python3-testUpgrade python3.14-develUpgrade python3.9-debugsourceUpgrade python3-debugsourceUpgrade python3.14-freethreadingUpgrade python3-idleUpgrade python3.14-freethreading-develUpgrade python3.12-libsUpgrade python3.12-idleUpgrade python3.14-freethreading-tkinterUpgrade python3.11-libsUpgrade python3.14-debugUpgrade python3.12-debugUpgrade python3.14-tkinterUpgrade platform-python-debugUpgrade python3.11-idleUpgrade python3.12-testUpgrade python3-libsUpgrade python3.12-develUpgrade platform-python-develUpgrade python3.9-debuginfoUpgrade python3-develUpgrade python3.14-freethreading-debugUpgrade python3.11-debuginfoUpgrade python3-debuginfoUpgrade python3-debug | Apr 29, 2026 | Apr 28, 2026 |
| Ubuntu | — | Upgrade python3.12Upgrade python3.14Upgrade libpython3.10Upgrade libpython3.14Upgrade libpython3.12t64Upgrade python3.10 | Jul 6, 2026 | Apr 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 17, 2026 | Apr 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub