portage-ng / portage / dev-lang / pypy / 2.7.8.0.0-r1
portage-ng glsa
1 advisory reference dev-lang/pypy · none place version 2.7.8.0.0-r1 in a vulnerable range
▸ GLSA 202506-07 Python, PyPy: Multiple Vulnerabilities version not in range high local and remote 2025-06-12

Multiple vulberabilities have been discovered in Python and PyPy, the worst of which can lead to privilege escalation.

Announced
2025-06-12
Revised
2025-06-12
Access
local and remote
Bugs
#929045 #937124 #938432 #939206 #945845 #953493 #956682 #957088
Advisory
https://security.gentoo.org/glsa/202506-07

Affected packages

PackageArchVulnerableUnaffected
dev-lang/pypy*< 3.10.7.3.19_p4:3.10, < 3.11.7.3.19_p9:3.11>= 3.10.7.3.19_p4:3.10, >= 3.11.7.3.19_p9:3.11
dev-lang/python*< 3.14.0_beta2:3.14, < 3.13.3_p1:3.13, < 3.12.10_p1:3.12, < 3.11.12_p1:3.11, < 3.10.17_p1:3.10, < 3.9.22_p1:3.9, < 3.8.20_p7:3.8>= 3.14.0_beta2:3.14, >= 3.13.3_p1:3.13, >= 3.12.10_p1:3.12, >= 3.11.12_p1:3.11, >= 3.10.17_p1:3.10, >= 3.9.22_p1:3.9, >= 3.8.20_p7:3.8

Background

Python is an interpreted, interactive, object-oriented, cross-platform programming language.

Description

Multiple vulnerabilities have been discovered in Python, PyPy3. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Python, PyPy3 users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.14.0_beta2:3.14"
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.13.3_p1:3.13"
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.12.10_p1:3.12"
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.11.12_p1:3.11"
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.10.17_p1:3.10"
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.9.22_p1:3.9"
# emerge --ask --oneshot --verbose ">=dev-lang/python-3.8.20_p7:3.8"
# emerge --ask --oneshot --verbose ">=dev-lang/pypy-3.10.7.3.19_p4:3.10"
# emerge --ask --oneshot --verbose ">=dev-lang/pypy-3.11.7.3.19_p9:3.11"

References