CVE-2015-20107: fedoraproject fedora

Modified

AliasesALPINE-CVE-2015-20107SUSE-SU-2022:2147-1SUSE-SU-2022:2166-1+14 more

Published 13-04-2022Last modified 14-10-2026

Vulnerability summary

CVE-2015-20107 is a high (CVSS 8.0) vulnerability in fedoraproject fedora. EPSS estimates a 2.78% chance of exploitation in the next 30 days, higher than 86.3% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

8.0/10

010

High · v2.0 (NVD)

EPSS score

2.78%

0%100%

Low · -4.29 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 15 · Related 7

DLA-3432-1 DLA-3477-1 DLA-3980-1 MGASA-2022-0359 MGASA-2022-0367 OPENSUSE-SU-2024:12150-1+9 more

Timeline

13-04-2022
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

CVSS metrics

7 scores · 6 sources · 2 versions

v3.17.8v2.08.0

EPSS trend

Probability

2.78%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

Decrease -4.29 pp

From 7.07% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugs.python.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-77Improper Neutralization of Special Elements used in a CommandThe product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat161 products

babel< 0:2.7.0-11.module+el8.5.0+11015+9c1c7c42 | < 0:2.5.1-10.module+el8.5.0+11014+88fc0d0b
Cython< 0:0.29.14-4.module+el8.4.0+8888+89bc7e79 | < 0:0.29.21-5.module+el8.4.0+9822+20bf1249 | < 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Cython-debugsource< 0:0.29.14-4.module+el8.4.0+8888+89bc7e79 | < 0:0.29.21-5.module+el8.4.0+9822+20bf1249 | < 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
mod_wsgi< 0:4.6.8-4.module+el8.7.0+16653+23ccaf52 | < 0:4.7.1-5.module+el8.7.0+16654+645aad7f
numpy< 0:1.17.3-6.module+el8.5.0+12205+a865257a | < 0:1.19.4-3.module+el8.5.0+12204+54860423 | < 1:1.14.2-16.module+el8.4.0+9406+221a4565

numpy-debugsource< 0:1.17.3-6.module+el8.5.0+12205+a865257a | < 0:1.19.4-3.module+el8.5.0+12204+54860423 | < 1:1.14.2-16.module+el8.4.0+9406+221a4565
pybind11< 0:2.7.1-1.module+el8.6.0+12838+640e6226
pytest< 0:4.6.6-3.module+el8.4.0+8888+89bc7e79 | < 0:6.0.2-2.module+el8.4.0+9822+20bf1249 | < 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e
python-asn1crypto< 0:1.2.0-3.module+el8.4.0+8888+89bc7e79
python-atomicwrites< 0:1.3.0-8.module+el8.4.0+8888+89bc7e79
python-attrs< 0:19.3.0-3.module+el8.4.0+8888+89bc7e79 | < 0:20.3.0-2.module+el8.4.0+9822+20bf1249 | < 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e
python-backports< 0:1.0-16.module+el8.4.0+9193+f3daf6ef
python-backports-ssl_match_hostname< 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
python-cffi< 0:1.13.2-3.module+el8.4.0+8888+89bc7e79 | < 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-cffi-debugsource< 0:1.13.2-3.module+el8.4.0+8888+89bc7e79 | < 0:1.14.3-2.module+el8.4.0+9822+20bf1249
python-chardet< 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 | < 0:3.0.4-19.module+el8.4.0+9822+20bf1249 | < 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
python-coverage< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python-coverage-debugsource< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python-cryptography< 0:2.8-3.module+el8.4.0+8888+89bc7e79 | < 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-cryptography-debugsource< 0:2.8-3.module+el8.4.0+8888+89bc7e79 | < 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-dns< 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e
python-docs< 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python-docutils< 0:0.14-12.module+el8.1.0+3111+de3f2d8e
python-funcsigs< 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e
python-idna< 0:2.8-6.module+el8.4.0+8888+89bc7e79 | < 0:2.10-3.module+el8.4.0+9822+20bf1249 | < 0:2.5-7.module+el8.1.0+3111+de3f2d8e
python-iniconfig< 0:1.1.1-2.module+el8.4.0+9822+20bf1249
python-ipaddress< 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e
python-jinja2< 0:2.11.3-1.module+el8.7.0+15575+d005caff | < 0:2.10-9.module+el8.5.0+10541+706bb066
python-lxml< 0:4.4.1-7.module+el8.6.0+13958+214a5473 | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c | < 0:4.2.3-6.module+el8.6.0+13959+8e368262
python-lxml-debugsource< 0:4.4.1-7.module+el8.6.0+13958+214a5473 | < 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c | < 0:4.2.3-6.module+el8.6.0+13959+8e368262
python-markupsafe< 0:1.1.1-6.module+el8.4.0+8888+89bc7e79 | < 0:0.23-19.module+el8.1.0+3111+de3f2d8e
python-markupsafe-debugsource< 0:1.1.1-6.module+el8.4.0+8888+89bc7e79
python-mock< 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e
python-more-itertools< 0:7.2.0-5.module+el8.4.0+8888+89bc7e79 | < 0:8.5.0-2.module+el8.4.0+9822+20bf1249
python-nose< 0:1.3.7-31.module+el8.5.0+12203+77770ab7
python-nose-docs< 0:1.3.7-31.module+el8.5.0+12203+77770ab7
python-packaging< 0:19.2-3.module+el8.4.0+8888+89bc7e79 | < 0:20.4-4.module+el8.4.0+9822+20bf1249
python-pluggy< 0:0.13.0-3.module+el8.4.0+8888+89bc7e79 | < 0:0.13.1-3.module+el8.4.0+9822+20bf1249 | < 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e
python-ply< 0:3.11-10.module+el8.4.0+9579+e9717e18 | < 0:3.11-10.module+el8.4.0+9822+20bf1249
python-psutil< 0:5.6.4-4.module+el8.5.0+12031+10ce4870 | < 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python-psutil-debugsource< 0:5.6.4-4.module+el8.5.0+12031+10ce4870 | < 0:5.8.0-4.module+el8.4.0+9822+20bf1249
python-psycopg2< 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249 | < 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-psycopg2-debuginfo< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-psycopg2-debugsource< 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 | < 0:2.8.6-2.module+el8.4.0+9822+20bf1249 | < 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-psycopg2-doc< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-py< 0:1.8.0-8.module+el8.4.0+8888+89bc7e79 | < 0:1.10.0-1.module+el8.4.0+9822+20bf1249 | < 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e
python-pycparser< 0:2.19-3.module+el8.4.0+8888+89bc7e79 | < 0:2.20-3.module+el8.4.0+9822+20bf1249
python-pygments< 0:2.2.0-22.module+el8.5.0+10788+a4cea9e0
python-pymongo< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python-pymongo-debuginfo< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python-pymongo-debugsource< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python-PyMySQL< 0:0.10.1-1.module+el8.4.0+9692+8e86ab84 | < 0:0.10.1-2.module+el8.4.0+9822+20bf1249 | < 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e
python-pysocks< 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 | < 0:1.7.1-4.module+el8.4.0+9822+20bf1249 | < 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
python-pytest-mock< 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e
python-requests< 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 | < 0:2.25.0-2.module+el8.4.0+9822+20bf1249 | < 0:2.20.0-3.module+el8.2.0+4577+feefd9b8
python-setuptools_scm< 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e
python-sqlalchemy< 0:1.3.2-2.module+el8.3.0+6647+8d010749
python-sqlalchemy-doc< 0:1.3.2-2.module+el8.3.0+6647+8d010749
python-toml< 0:0.10.1-5.module+el8.4.0+9822+20bf1249
python-urllib3< 0:1.25.7-5.module+el8.5.0+11639+ea5b349d | < 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1 | < 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef
python-virtualenv< 0:15.1.0-21.module+el8.5.0+12203+77770ab7
python-wcwidth< 0:0.1.7-16.module+el8.4.0+8888+89bc7e79 | < 0:0.2.5-3.module+el8.4.0+9822+20bf1249
python-wheel< 0:0.33.6-6.module+el8.5.0+12205+a865257a | < 1:0.35.1-4.module+el8.5.0+12204+54860423 | < 1:0.31.1-3.module+el8.5.0+12203+77770ab7
python2< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-attrs< 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e
python2-babel< 0:2.5.1-10.module+el8.5.0+11014+88fc0d0b
python2-backports< 0:1.0-16.module+el8.4.0+9193+f3daf6ef
python2-backports-ssl_match_hostname< 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
python2-bson< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-bson-debuginfo< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-chardet< 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
python2-coverage< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python2-coverage-debuginfo< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python2-Cython< 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
python2-Cython-debuginfo< 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
python2-debug< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-debuginfo< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-debugsource< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-devel< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-dns< 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e
python2-docs< 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docs-info< 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docutils< 0:0.14-12.module+el8.1.0+3111+de3f2d8e
python2-funcsigs< 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e
python2-idna< 0:2.5-7.module+el8.1.0+3111+de3f2d8e
python2-ipaddress< 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e
python2-jinja2< 0:2.10-9.module+el8.5.0+10541+706bb066
python2-libs< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-lxml< 0:4.2.3-6.module+el8.6.0+13959+8e368262
python2-lxml-debuginfo< 0:4.2.3-6.module+el8.6.0+13959+8e368262
python2-markupsafe< 0:0.23-19.module+el8.1.0+3111+de3f2d8e
python2-mock< 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e
python2-nose< 0:1.3.7-31.module+el8.5.0+12203+77770ab7
python2-numpy< 1:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-debuginfo< 1:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-doc< 1:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-f2py< 1:1.14.2-16.module+el8.4.0+9406+221a4565
python2-pip< 0:9.0.3-19.module+el8.6.0+13001+ad200bd9
python2-pip-wheel< 0:9.0.3-19.module+el8.6.0+13001+ad200bd9
python2-pluggy< 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e
python2-psycopg2< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debug< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debug-debuginfo< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debuginfo< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-tests< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-py< 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e
python2-pygments< 0:2.2.0-22.module+el8.5.0+10788+a4cea9e0
python2-pymongo< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-pymongo-debuginfo< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-pymongo-gridfs< 0:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-PyMySQL< 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e
python2-pysocks< 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
python2-pytest< 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e
python2-pytest-mock< 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e
python2-pytz< 0:2017.2-12.module+el8.1.0+3111+de3f2d8e
python2-pyyaml< 0:3.12-16.module+el8.1.0+3111+de3f2d8e
python2-pyyaml-debuginfo< 0:3.12-16.module+el8.1.0+3111+de3f2d8e
python2-requests< 0:2.20.0-3.module+el8.2.0+4577+feefd9b8
python2-rpm-macros< 0:3-38.module+el8.1.0+3111+de3f2d8e
python2-scipy< 0:1.0.0-21.module+el8.5.0+10858+05337455
python2-scipy-debuginfo< 0:1.0.0-21.module+el8.5.0+10858+05337455
python2-setuptools< 0:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools_scm< 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e
python2-setuptools-wheel< 0:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-six< 0:1.11.0-6.module+el8.4.0+9287+299307c7
python2-sqlalchemy< 0:1.3.2-2.module+el8.3.0+6647+8d010749
python2-test< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-tkinter< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-tools< 0:2.7.18-11.module+el8.7.0+15681+7a92afba
python2-urllib3< 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef
python2-virtualenv< 0:15.1.0-21.module+el8.5.0+12203+77770ab7
python2-wheel< 1:0.31.1-3.module+el8.5.0+12203+77770ab7
python2-wheel-wheel< 1:0.31.1-3.module+el8.5.0+12203+77770ab7
python38< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-asn1crypto< 0:1.2.0-3.module+el8.4.0+8888+89bc7e79
python38-atomicwrites< 0:1.3.0-8.module+el8.4.0+8888+89bc7e79
python38-attrs< 0:19.3.0-3.module+el8.4.0+8888+89bc7e79
python38-babel< 0:2.7.0-11.module+el8.5.0+11015+9c1c7c42
python38-cffi< 0:1.13.2-3.module+el8.4.0+8888+89bc7e79
python38-cffi-debuginfo< 0:1.13.2-3.module+el8.4.0+8888+89bc7e79
python38-chardet< 0:3.0.4-19.module+el8.4.0+8888+89bc7e79
python38-cryptography< 0:2.8-3.module+el8.4.0+8888+89bc7e79
python38-cryptography-debuginfo< 0:2.8-3.module+el8.4.0+8888+89bc7e79
python38-Cython< 0:0.29.14-4.module+el8.4.0+8888+89bc7e79
python38-Cython-debuginfo< 0:0.29.14-4.module+el8.4.0+8888+89bc7e79
python38-debug< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-debuginfo< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-debugsource< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-devel< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-idle< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-idna< 0:2.8-6.module+el8.4.0+8888+89bc7e79
python38-jinja2< 0:2.11.3-1.module+el8.7.0+15575+d005caff
python38-libs< 0:3.8.13-1.module+el8.7.0+15641+2ece4388
python38-lxml< 0:4.4.1-7.module+el8.6.0+13958+214a5473
python38-lxml-debuginfo< 0:4.4.1-7.module+el8.6.0+13958+214a5473
python38-markupsafe< 0:1.1.1-6.module+el8.4.0+8888+89bc7e79
python38-markupsafe-debuginfo< 0:1.1.1-6.module+el8.4.0+8888+89bc7e79
python38-mod_wsgi< 0:4.6.8-4.module+el8.7.0+16653+23ccaf52
python38-more-itertools< 0:7.2.0-5.module+el8.4.0+8888+89bc7e79
python38-numpy< 0:1.17.3-6.module+el8.5.0+12205+a865257a
python38-numpy-debuginfo< 0:1.17.3-6.module+el8.5.0+12205+a865257a

Show all 161

Opensuse24 products

python-base&distro=openSUSE Leap 15.3< 2.7.18-150000.41.1
python-base&distro=openSUSE Leap 15.4< 2.7.18-150000.41.1
python-doc&distro=openSUSE Leap 15.3< 2.7.18-150000.41.1
python-doc&distro=openSUSE Leap 15.4< 2.7.18-150000.41.1
python3-core&distro=openSUSE Leap 15.3< 3.6.15-150300.10.27.1

Show all 24

Ubuntu8 products

python2.7< 2.7.6-8ubuntu0.6+esm11 | < 2.7.12-1ubuntu0~16.04.18+esm2 | < 2.7.17-1~18.04ubuntu1.8 | < 2.7.18-1~20.04.3 | < 2.7.18-13ubuntu1.1
python3.10< 3.10.4-3ubuntu0.1
python3.4< 3.4.3-1ubuntu1~14.04.7+esm13
python3.5< 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 | < 3.5.2-2ubuntu0~16.04.13+esm3
python3.6< 3.6.9-1~18.04ubuntu1.8

Show all 8

Netapp3 products

Alpine1 product

python3< 3.10.5-r0

Debian1 product

pypy3< 7.3.11+dfsg-1

Fedoraproject1 product

fedoraEOL35 | 36 | 37

Python1 product

python≥ 3.7.0, ≤ 3.7.15 | ≥ 3.8.0, ≤ 3.8.15 | ≥ 3.9.0, ≤ 3.9.15 | ≥ 3.10.0, < 3.10.8

8 vendors · 200 products · Showing 200 of 435

References

71 links

bugs.python.org/issue24778ExploitIssue TrackingVendor Advisory
github.com/python/cpython/issues/68966Issue TrackingThird Party Advisory
security.netapp.com/advisory/ntap-20220616-0001/Third Party Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory

Show all 71 references

lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
lists.fedoraproject.org/archives/…Vendor Advisory
python-security.readthedocs.io/vuln/mailcap-shell-injection.htmlPatchThird Party AdvisoryARTICLE
security.gentoo.org/glsa/202305-02Vendor Advisory
lists.debian.org/debian-lts-announce/2023/05/msg00024.htmlMailing List
lists.debian.org/debian-lts-announce/2023/06/msg00039.htmlMailing List
lists.debian.org/debian-lts-announce/2024/12/msg00000.html
security.alpinelinux.org/vuln/CVE-2015-20107Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222147-1/Advisory
bugzilla.suse.com/1198511REPORT
www.suse.com/security/cve/CVE-2015-20107WEB
www.suse.com/support/update/announcement/2022/suse-su-20222166-1/Advisory
bugzilla.suse.com/1070738REPORT
bugzilla.suse.com/1199441REPORT
www.suse.com/support/update/announcement/2022/suse-su-20222174-1/Advisory
bugzilla.suse.com/1192249REPORT
www.suse.com/support/update/announcement/2022/suse-su-20222248-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222249-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222291-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222344-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222357-1/Advisory
access.redhat.com/errata/RHSA-2022:7581Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/indexARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2075390REPORT
bugzilla.redhat.com/show_bug.cgi?id=2086141REPORT
bugzilla.redhat.com/show_bug.cgi?id=2090006REPORT
bugzilla.redhat.com/show_bug.cgi?id=2095265REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7581.jsonAdvisory
access.redhat.com/security/cve/CVE-2015-20107REPORT
www.cve.org/CVERecord?id=CVE-2015-20107AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2015-20107AdvisoryOval
access.redhat.com/errata/RHSA-2022:7592Advisory
bugzilla.redhat.com/show_bug.cgi?id=2095271REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7592.jsonAdvisory
access.redhat.com/errata/RHSA-2022:7593Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7593.jsonAdvisory
ubuntu.com/security/CVE-2015-20107REPORT
mail.python.org/archives/list/security-announce@python.org/thread/QDSXNCW77UGULFG2JMDFZQ7H4DIR32LA/REPORT
github.com/python/cpython/pull/91542/commits/340251550897cb98ae83ad1040750d6300112e80REPORT
github.com/python/cpython/pull/91993REPORT
github.com/python/cpython/pull/98191REPORT
ubuntu.com/security/notices/USN-5519-1Advisory
ubuntu.com/security/notices/USN-5888-1Advisory
ubuntu.com/security/notices/USN-6891-1Advisory
security-tracker.debian.org/tracker/CVE-2015-20107Advisory
www.suse.com/support/update/announcement/2022/suse-su-20222357-2/Advisory
cert-portal.siemens.com/productcert/html/ssa-398330.html