# CVE-2026-7774: tarfile.data_filter path traversal bypass allows writing outside the extraction directory

CVE-2026-7774 is fixed in 98 products on 3 platforms, first by idle-python3.14 3.14.4-1ubuntu0.1, released June 8, 2026. 10 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-7774
- Priority: Routine
- CVSS: 6.9 (Moderate)
- EPSS: 0.0060
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 4, 2026
- Weakness: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7774

## Description

tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.13 | 3.13.14 | [Python 3.13 3.13.14](https://patchblox.com/security/data/fix/windows-app/python.python.3.13-3.13.14.md) | Jun 10, 2026 |
| Windows apps | Python 3.14 | 3.14.6 | [Python 3.14 3.14.6](https://patchblox.com/security/data/fix/windows-app/python.python.3.14-3.14.6.md) | Jun 10, 2026 |
| Linux | idle-python3.12 Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [idle-python3.12 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-idle-python3.12-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | idle-python3.14 Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [idle-python3.14 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-idle-python3.14-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | libpython3.12-minimal Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [libpython3.12-minimal 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpython3.12-minimal-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | libpython3.12-stdlib Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [libpython3.12-stdlib 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpython3.12-stdlib-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | libpython3.12-testsuite Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [libpython3.12-testsuite 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpython3.12-testsuite-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | libpython3.12t64 Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [libpython3.12t64 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpython3.12t64-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | libpython3.14 Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [libpython3.14 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpython3.14-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | libpython3.14-minimal Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [libpython3.14-minimal 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpython3.14-minimal-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | libpython3.14-stdlib Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [libpython3.14-stdlib 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpython3.14-stdlib-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | libpython3.14-testsuite Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [libpython3.14-testsuite 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpython3.14-testsuite-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | mingw-python3 Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw32-python3 Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw32-python3-debuginfo Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw32-python3-idle Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw32-python3-test Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw32-python3-tkinter Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw64-python3 Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw64-python3-debuginfo Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw64-python3-idle Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw64-python3-test Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | mingw64-python3-tkinter Fedora 43 | 3.11.16-1.fc43 | [FEDORA-2026-9359FB439F](https://patchblox.com/security/data/fix/linux/fedora-2026-9359fb439f.md) | Sep 18, 2026 |
| Linux | pypy3 Debian 14 | 8.0.0+dfsg-1 | [DEBIAN-CVE-2026-7774](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7774.md) | Jun 24, 2026 |
| Linux | python-unversioned-command amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3 amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3 sles 15.6 | 3.6.15-150300.10.129.1 | [SUSE-SU-2026:4754-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4754-1.md) | Nov 7, 2026 |
| Linux | python3 sles 15.7 | 3.6.15-150300.10.129.1 | [SUSE-SU-2026:4754-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4754-1.md) | Nov 7, 2026 |
| Linux | python3-core sles 15.6 | 3.6.15-150300.10.129.1 | [SUSE-SU-2026:4754-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4754-1.md) | Nov 7, 2026 |
| Linux | python3-core sles 15.7 | 3.6.15-150300.10.129.1 | [SUSE-SU-2026:4754-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4754-1.md) | Nov 7, 2026 |
| Linux | python3-debug amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3-devel amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3-idle amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3-libs amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3-test amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3-tkinter amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3.11 amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-debug amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-debuginfo amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-debugsource amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-devel amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-idle amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-libs amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-test amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.11-tkinter amzn 2023 | 3.11.15-1.amzn2023.0.4 | [ALAS2023-2026-1953](https://patchblox.com/security/data/fix/linux/alas2023-2026-1953.md) | Jul 20, 2026 |
| Linux | python3.12 Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [python3.12 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3.12-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | python3.12 amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-debug amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-debuginfo amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-debugsource amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-devel amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-examples Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [python3.12-examples 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3.12-examples-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | python3.12-full Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [python3.12-full 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3.12-full-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | python3.12-idle amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-libs amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-minimal Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [python3.12-minimal 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3.12-minimal-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | python3.12-nopie Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [python3.12-nopie 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3.12-nopie-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | python3.12-test amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-tkinter amzn 2023 | 3.12.13-2.amzn2023.0.4 | [ALAS2023-2026-1954](https://patchblox.com/security/data/fix/linux/alas2023-2026-1954.md) | Jul 20, 2026 |
| Linux | python3.12-venv Ubuntu 24.04.5 LTS (noble) | 3.12.3-1ubuntu0.15 | [python3.12-venv 3.12.3-1ubuntu0.15](https://patchblox.com/security/data/fix/linux/ubuntu-noble-python3.12-venv-3.12.3-1ubuntu0.15.md) | Jul 7, 2026 |
| Linux | python3.13 Debian 13.5 (trixie) | 3.13.5-2+deb13u3 | [DEBIAN-CVE-2026-7774](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7774.md) | Jun 24, 2026 |
| Linux | python3.13 amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-debug amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-debuginfo amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-debugsource amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-devel amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-freethreading amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-freethreading-debug amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-idle amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-libs amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-test amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.13-tkinter amzn 2023 | 3.13.14-1.amzn2023.0.1 | [ALAS2023-2026-1910](https://patchblox.com/security/data/fix/linux/alas2023-2026-1910.md) | Jul 6, 2026 |
| Linux | python3.14 Debian 14 | 3.14.6-1 | [DEBIAN-CVE-2026-7774](https://patchblox.com/security/data/fix/linux/debian-cve-2026-7774.md) | Jun 24, 2026 |
| Linux | python3.14 Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14 amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-debug amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-debuginfo amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-debugsource amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-devel amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-examples Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-examples 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-examples-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14-freethreading amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-freethreading-debug amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-freethreading-devel amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-freethreading-idle amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-freethreading-libs amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-freethreading-test amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-freethreading-tkinter amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-full Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-full 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-full-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14-gdbm Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-gdbm 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-gdbm-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14-idle amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-libs amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-minimal Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-minimal 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-minimal-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14-nopie Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-nopie 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-nopie-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14-test amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-tk Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-tk 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-tk-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.14-tkinter amzn 2023 | 3.14.6-1.amzn2023.0.1 | [ALAS2023-2026-1929](https://patchblox.com/security/data/fix/linux/alas2023-2026-1929.md) | Jul 6, 2026 |
| Linux | python3.14-venv Ubuntu 26.04.1 LTS (resolute) | 3.14.4-1ubuntu0.1 | [python3.14-venv 3.14.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-python3.14-venv-3.14.4-1ubuntu0.1.md) | Jun 8, 2026 |
| Linux | python3.9-debuginfo amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python3.9-debugsource amzn 2023 | 3.9.25-1.amzn2023.0.9 | [ALAS2023-2026-1995](https://patchblox.com/security/data/fix/linux/alas2023-2026-1995.md) | Aug 3, 2026 |
| Linux | python311 sles 15.6 | 3.11.15-150600.3.62.2 | [SUSE-SU-2026:3560-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3560-1.md) | Aug 10, 2026 |
| Linux | python311 sles 15.7 | 3.11.15-150600.3.62.2 | [SUSE-SU-2026:3560-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3560-1.md) | Aug 10, 2026 |
| Linux | python311-core sles 15.6 | 3.11.15-150600.3.62.2 | [SUSE-SU-2026:3560-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3560-1.md) | Aug 10, 2026 |
| Linux | python311-core sles 15.7 | 3.11.15-150600.3.62.2 | [SUSE-SU-2026:3560-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3560-1.md) | Aug 10, 2026 |
| Linux | python312 sles 15.6 | 3.12.14-150600.3.68.1 | [SUSE-SU-2026:4534-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4534-1.md) | Oct 6, 2026 |
| Linux | python312-core sles 15.6 | 3.12.14-150600.3.68.1 | [SUSE-SU-2026:4534-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4534-1.md) | Oct 6, 2026 |
| Linux | python313 sles 15.7 | 3.13.14-150700.4.53.1 | [SUSE-SU-2026:3649-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3649-1.md) | Aug 19, 2026 |
| Linux | python313-core sles 15.7 | 3.13.14-150700.4.53.1 | [SUSE-SU-2026:3649-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3649-1.md) | Aug 19, 2026 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 2 | no-fix |
| Windows apps | Python 3.10 | no-fix |
| Windows apps | Python 3.11 | no-fix |
| Windows apps | Python 3.12 | no-fix |
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |
| Windows apps | Python 3.7 | no-fix |
| Windows apps | Python 3.8 | no-fix |
| Windows apps | Python 3.9 | no-fix |
| macOS | Python3 | no-fix |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.