MGASA-2026-0421
- Source
- https://advisories.mageia.org/MGASA-2026-0421.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0421.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2026-0421
- Published
- 2026-09-20T04:25:32Z
- Modified
- 2026-09-20T04:30:03Z
- Summary
- Updated python-configargparse packages fix security vulnerabilities
- Details
-
Config file or environment variable can trigger writing out a config file, overwriting an arbitrary file and disclosing configuration values
- References
-
- https://advisories.mageia.org/MGASA-2026-0421.html
- https://bugs.mageia.org/show_bug.cgi?id=36321
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UWACSE6EO43FMBJWXK22JG7C3LAOLJ3Z/
- https://github.com/bw2/ConfigArgParse/security/advisories/GHSA-6m27-337c-jcgf
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / python-configargparse
Package
- Name
- python-configargparse
- Purl
- pkg:rpm/mageia/python-configargparse?arch=source&distro=mageia-10
Mageia:9 / python-configargparse
Package
- Name
- python-configargparse
- Purl
- pkg:rpm/mageia/python-configargparse?arch=source&distro=mageia-9