Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
dulwich library may allow attackers to run code
published 3 months ago
Summary
The dulwich software library has a security weakness that could let a malicious user execute arbitrary code on your system. This issue has been fixed in the updated version 0.25.2.post6+tuxcare. Upgrade dulwich to this latest version as soon as possible to protect your environment.
What to do
- Update jelmer vernooij dulwich to version 0.25.2.post6+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | jelmer vernooij | dulwich |
>= 0.25.2, < 0.25.2.post6+tuxcare Fix: upgrade to 0.25.2.post6+tuxcare
|
Original advisory text
TuxCare security update for dulwich (1 CVE)
TuxCare rebuilt dulwich to address 1 CVE. Fixed in 0.25.2.post6+tuxcare.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1784164011 · OSV
Track software like this
Free during beta