{"document":{"aggregate_severity":{"text":"mittel"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Python ist eine universelle, üblicherweise interpretierte höhere Programmiersprache.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um Informationen offenzulegen.","title":"Angriff"},{"category":"general","text":"- Linux\n- UNIX","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-3994 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2014/wid-sec-w-2026-3994.json"},{"category":"self","summary":"WID-SEC-2026-3994 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3994"},{"category":"external","summary":"Meldung auf der OSS-Security Mailingliste vom 2014-09-21","url":"http://www.openwall.com/lists/oss-security/2014/09/19/1"},{"category":"external","summary":"Ubuntu Security Notice USN-2382-1 vom 2014-10-14","url":"http://www.ubuntu.com/usn/usn-2382-1/"},{"category":"external","summary":"Debian Security Advisory DSA-3146-1 vom 2015-01-30","url":"https://www.debian.org/security/2015/dsa-3146"},{"category":"external","summary":"openSUSE Security Update OPENSUSE-SU-2026:12038-1 vom 2026-10-15","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7MTHVD2S6OTDDPCC5DGQFR6JXMKQ6N2D/"}],"source_lang":"en-US","title":"Python: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","tracking":{"current_release_date":"2026-10-15T22:00:00.000+00:00","generator":{"date":"2026-10-16T10:37:16.853+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-3994","initial_release_date":"2014-09-21T22:00:00.000+00:00","revision_history":[{"date":"2014-09-21T22:00:00.000+00:00","number":"1","summary":"Initial Release"},{"date":"2014-09-21T22:00:00.000+00:00","number":"2","summary":"Version nicht vorhanden"},{"date":"2014-10-14T22:00:00.000+00:00","number":"3","summary":"New remediations available"},{"date":"2014-10-14T22:00:00.000+00:00","number":"4","summary":"Version nicht vorhanden"},{"date":"2015-02-01T23:00:00.000+00:00","number":"5","summary":"New remediations available"},{"date":"2015-02-01T23:00:00.000+00:00","number":"6","summary":"Version nicht vorhanden"},{"date":"2015-02-01T23:00:00.000+00:00","number":"7","summary":"Version nicht vorhanden"},{"date":"2026-10-15T22:00:00.000+00:00","number":"8","summary":"Neue Updates von openSUSE aufgenommen"}],"status":"final","version":"8"}},"product_tree":{"branches":[{"branches":[{"category":"product_name","name":"Debian Linux Wheezy (7.0)","product":{"name":"Debian Linux Wheezy (7.0)","product_id":"T001572","product_identification_helper":{"cpe":"cpe:/o:debian:debian_linux:7.0"}}}],"category":"vendor","name":"Debian"},{"branches":[{"branches":[{"category":"product_version_range","name":"<2.3.0","product":{"name":"Open Source Python <2.3.0","product_id":"105004"}},{"category":"product_version","name":"2.3.0","product":{"name":"Open Source Python 2.3.0","product_id":"105004-fixed","product_identification_helper":{"cpe":"cpe:/a:python:python:2.3"}}}],"category":"product_name","name":"Python"}],"category":"vendor","name":"Open Source"},{"branches":[{"category":"product_name","name":"SUSE openSUSE","product":{"name":"SUSE openSUSE","product_id":"T055946","product_identification_helper":{"cpe":"cpe:/o:suse:opensuse:-"}}}],"category":"vendor","name":"SUSE"},{"branches":[{"branches":[{"category":"product_version","name":"14.04 LTS","product":{"name":"Ubuntu Linux 14.04 LTS","product_id":"266193","product_identification_helper":{"cpe":"cpe:/o:canonical:ubuntu_linux:14.04::lts"}}}],"category":"product_name","name":"Linux"}],"category":"vendor","name":"Ubuntu"}]},"vulnerabilities":[{"cve":"CVE-2014-1829","product_status":{"known_affected":["105004","T055946","T001572","266193"]},"release_date":"2014-09-21T22:00:00.000+00:00","title":"CVE-2014-1829"},{"cve":"CVE-2014-1830","product_status":{"known_affected":["105004","T055946","266193"]},"release_date":"2014-09-21T22:00:00.000+00:00","title":"CVE-2014-1830"}]}