{
  "document": {
    "aggregate_severity": {
      "text": "High"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_alt_python/alpinelinux3.24/vex/2023/cve-2023-41105-els_alt_python-alpinelinux3_24.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-07-29T08:40:59Z",
      "generator": {
        "date": "2026-07-29T08:40:59Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2023-41105-ELS_ALT_PYTHON-ALPINELINUX3.24",
      "initial_release_date": "2023-08-23T07:15:00Z",
      "revision_history": [
        {
          "date": "2023-08-23T07:15:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-21T20:27:23Z",
          "number": "2",
          "summary": "Official Publication"
        },
        {
          "date": "2026-07-27T12:33:00Z",
          "number": "3",
          "summary": "Update document"
        },
        {
          "date": "2026-07-29T08:40:59Z",
          "number": "4",
          "summary": "Update document"
        }
      ],
      "status": "final",
      "version": "4"
    },
    "title": "Security update on CVE-2023-41105"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Alpine Linux 3.24",
                "product": {
                  "name": "Alpine Linux 3.24",
                  "product_id": "Alpine-Linux-3.24",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:alpinelinux:alpine_linux:3.24:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Alpine Linux"
          }
        ],
        "category": "vendor",
        "name": "Alpine Linux"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "alt-python37-wheel-0.31.1-r1.aarch64",
                "product": {
                  "name": "alt-python37-wheel-0.31.1-r1.aarch64",
                  "product_id": "alt-python37-wheel-0.31.1-r1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python37-wheel@0.31.1-r1?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python37-wheel-wheel-0.31.1-r1.aarch64",
                "product": {
                  "name": "alt-python37-wheel-wheel-0.31.1-r1.aarch64",
                  "product_id": "alt-python37-wheel-wheel-0.31.1-r1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python37-wheel-wheel@0.31.1-r1?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python39-wheel-wheel-0.37.0-r3.aarch64",
                "product": {
                  "name": "alt-python39-wheel-wheel-0.37.0-r3.aarch64",
                  "product_id": "alt-python39-wheel-wheel-0.37.0-r3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python39-wheel-wheel@0.37.0-r3?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python39-wheel-0.37.0-r3.aarch64",
                "product": {
                  "name": "alt-python39-wheel-0.37.0-r3.aarch64",
                  "product_id": "alt-python39-wheel-0.37.0-r3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python39-wheel@0.37.0-r3?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-idle-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-idle-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-idle-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-idle@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-gdbm-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-gdbm-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-gdbm-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-gdbm@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-debug-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-debug-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-debug-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-debug@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc0@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc2@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-doc-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-doc-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-doc-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-doc@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pyc-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-pyc-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-pyc-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pyc@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-dev-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-dev-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-dev-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-dev@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tkinter-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-tkinter-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-tkinter-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tkinter@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tests-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-tests-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-tests-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tests@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
                "product": {
                  "name": "alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
                  "product_id": "alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc1@3.8.20-r17?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-idle-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-idle-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-idle-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-idle@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-gdbm-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-gdbm-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-gdbm-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-gdbm@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-debug-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-debug-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-debug-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-debug@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc0@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc2@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tkinter-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-tkinter-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-tkinter-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tkinter@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pyc-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-pyc-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-pyc-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pyc@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-doc-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-doc-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-doc-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-doc@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tests-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-tests-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-tests-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tests@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-dbg-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-dbg-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-dbg-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-dbg@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-dev-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-dev-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-dev-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-dev@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
                "product": {
                  "name": "alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
                  "product_id": "alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc1@3.8.20-r16?arch=aarch64&os_name=alpine&os_version=3.24"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "alt-python37-wheel-0.31.1-r1.x86_64",
                "product": {
                  "name": "alt-python37-wheel-0.31.1-r1.x86_64",
                  "product_id": "alt-python37-wheel-0.31.1-r1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python37-wheel@0.31.1-r1?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python37-wheel-wheel-0.31.1-r1.x86_64",
                "product": {
                  "name": "alt-python37-wheel-wheel-0.31.1-r1.x86_64",
                  "product_id": "alt-python37-wheel-wheel-0.31.1-r1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python37-wheel-wheel@0.31.1-r1?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python39-wheel-wheel-0.37.0-r3.x86_64",
                "product": {
                  "name": "alt-python39-wheel-wheel-0.37.0-r3.x86_64",
                  "product_id": "alt-python39-wheel-wheel-0.37.0-r3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python39-wheel-wheel@0.37.0-r3?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python39-wheel-0.37.0-r3.x86_64",
                "product": {
                  "name": "alt-python39-wheel-0.37.0-r3.x86_64",
                  "product_id": "alt-python39-wheel-0.37.0-r3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python39-wheel@0.37.0-r3?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-idle-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-idle-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-idle-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-idle@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-gdbm-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-gdbm-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-gdbm-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-gdbm@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-debug-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-debug-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-debug-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-debug@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc0@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc2@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-doc-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-doc-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-doc-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-doc@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pyc-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-pyc-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-pyc-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pyc@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-dev-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-dev-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-dev-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-dev@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tkinter-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-tkinter-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-tkinter-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tkinter@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tests-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-tests-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-tests-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tests@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
                "product": {
                  "name": "alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
                  "product_id": "alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc1@3.8.20-r17?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-idle-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-idle-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-idle-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-idle@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-gdbm-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-gdbm-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-gdbm-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-gdbm@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-debug-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-debug-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-debug-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-debug@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc0@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc2@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tkinter-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-tkinter-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-tkinter-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tkinter@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pyc-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-pyc-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-pyc-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pyc@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-doc-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-doc-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-doc-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-doc@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-tests-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-tests-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-tests-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-tests@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-dbg-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-dbg-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-dbg-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-dbg@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-dev-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-dev-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-dev-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-dev@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
                "product": {
                  "name": "alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
                  "product_id": "alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:apk/tuxcare/alt-python38-pycache-pyc1@3.8.20-r16?arch=x86_64&os_name=alpine&os_version=3.24"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python37-wheel-0.31.1-r1.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.aarch64"
        },
        "product_reference": "alt-python37-wheel-0.31.1-r1.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python37-wheel-0.31.1-r1.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.x86_64"
        },
        "product_reference": "alt-python37-wheel-0.31.1-r1.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python37-wheel-wheel-0.31.1-r1.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.x86_64"
        },
        "product_reference": "alt-python37-wheel-wheel-0.31.1-r1.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python37-wheel-wheel-0.31.1-r1.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.aarch64"
        },
        "product_reference": "alt-python37-wheel-wheel-0.31.1-r1.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python39-wheel-wheel-0.37.0-r3.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.x86_64"
        },
        "product_reference": "alt-python39-wheel-wheel-0.37.0-r3.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python39-wheel-wheel-0.37.0-r3.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.aarch64"
        },
        "product_reference": "alt-python39-wheel-wheel-0.37.0-r3.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python39-wheel-0.37.0-r3.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.x86_64"
        },
        "product_reference": "alt-python39-wheel-0.37.0-r3.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python39-wheel-0.37.0-r3.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.aarch64"
        },
        "product_reference": "alt-python39-wheel-0.37.0-r3.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-idle-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-idle-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-idle-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-idle-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-gdbm-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-gdbm-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-gdbm-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-gdbm-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-debug-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-debug-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-debug-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-debug-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc0-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc0-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc2-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc2-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-doc-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-doc-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-doc-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-doc-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pyc-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-pyc-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pyc-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-pyc-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-dev-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-dev-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-dev-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-dev-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tkinter-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-tkinter-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tkinter-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-tkinter-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tests-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-tests-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tests-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-tests-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc1-3.8.20-r17.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.aarch64"
        },
        "product_reference": "alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc1-3.8.20-r17.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.x86_64"
        },
        "product_reference": "alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-idle-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-idle-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-idle-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-idle-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-gdbm-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-gdbm-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-gdbm-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-gdbm-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-debug-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-debug-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-debug-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-debug-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc0-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc0-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc2-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc2-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tkinter-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-tkinter-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tkinter-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-tkinter-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pyc-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-pyc-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pyc-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-pyc-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-doc-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-doc-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-doc-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-doc-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tests-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-tests-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-tests-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-tests-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-dbg-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-dbg-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-dbg-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-dbg-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-dev-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-dev-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-dev-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-dev-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc1-3.8.20-r16.aarch64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.aarch64"
        },
        "product_reference": "alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-python38-pycache-pyc1-3.8.20-r16.x86_64 as a component of Alpine Linux 3.24",
          "product_id": "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.x86_64"
        },
        "product_reference": "alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
        "relates_to_product_reference": "Alpine-Linux-3.24"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-41105",
      "cwe": {
        "id": "CWE-426",
        "name": "Untrusted Search Path"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        },
        {
          "category": "other",
          "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.aarch64",
          "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.x86_64",
          "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.aarch64",
          "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.x86_64",
          "Alpine-Linux-3.24:alt-python38-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.aarch64",
          "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.x86_64",
          "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.aarch64",
          "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.x86_64",
          "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.aarch64",
          "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.x86_64",
          "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.aarch64",
          "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els-lang/cve/CVE-2023-41105"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/106242",
          "url": "https://github.com/python/cpython/issues/106242"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/107981",
          "url": "https://github.com/python/cpython/pull/107981"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/107982",
          "url": "https://github.com/python/cpython/pull/107982"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/107983",
          "url": "https://github.com/python/cpython/pull/107983"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce%40python.org/thread/D6CDW3ZZC5D444YGL3VQUY6D4ECMCQLD/",
          "url": "https://mail.python.org/archives/list/security-announce%40python.org/thread/D6CDW3ZZC5D444YGL3VQUY6D4ECMCQLD/"
        },
        {
          "category": "external",
          "summary": "https://security.netapp.com/advisory/ntap-20231006-0015/",
          "url": "https://security.netapp.com/advisory/ntap-20231006-0015/"
        }
      ],
      "release_date": "2023-08-23T07:15:00Z",
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.aarch64",
            "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.x86_64",
            "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.aarch64",
            "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.x86_64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.aarch64",
            "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.x86_64",
            "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.aarch64",
            "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        },
        {
          "category": "impact",
          "date": "2026-07-21T16:37:13.806085Z",
          "details": "important",
          "product_ids": [
            "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.aarch64",
            "Alpine-Linux-3.24:alt-python37-wheel-0.31.1-r1.x86_64",
            "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.aarch64",
            "Alpine-Linux-3.24:alt-python37-wheel-wheel-0.31.1-r1.x86_64",
            "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.aarch64",
            "Alpine-Linux-3.24:alt-python39-wheel-0.37.0-r3.x86_64",
            "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.aarch64",
            "Alpine-Linux-3.24:alt-python39-wheel-wheel-0.37.0-r3.x86_64"
          ]
        },
        {
          "category": "impact",
          "date": "2026-07-29T07:47:33.090540Z",
          "details": "Not vulnerable\n\nalt-python38 3.8.20: NOT AFFECTED — vulnerable-component-absent: the CVE is a regression in CPython's C `normpath` (`os._path_normpath`/`_Py_normpath`) introduced in 3.11.0a3, which does not exist in 3.8.20; `os.path.normpath` is pure Python there and provably preserves embedded NUL bytes.\n\nPlatform in scope: alpinelinux3.24 (alt-python38 3.8.20). Assessed against what this package actually ships and links, not NVD version ranges.\n\nEvidence\n**What the flaw actually is (not a transitive finding).** CVE-2023-41105 lives in CPython itself — `Lib/posixpath.py`, `Lib/ntpath.py`, `Modules/posixmodule.c`, `Python/fileutils.c`. It is not a bundled/linked-dependency issue, so the ensurepip / expat / sqlite / openssl carve-outs do not decide it. Build flags recorded at the bottom anyway.\n\n**Source audited.** `/root/ai-workspace/alt-python38/Python-3.8.20.tar.xz`, extracted. Identical to the Debian orig tarball (`md5 745478c81d6382cf46b5e7ad89e56008` for both `Python-3.8.20.tar.xz` and `alt-python38_3.8.20.orig.tar.xz`), so the RPM, deb and Alpine paths all build the same tree. Version: `APKBUILD:4 pkgver=3.8.20`, `pkgrel=17`; `python38.spec:88 Release: 21`.\n\n**Vulnerable code absent (grep, reproducible):**\n- `grep -rn \"_path_normpath\" Python-3.8.20/` → only `Lib/test/test_ntpath.py:777: def test_path_normpath(self):` and `Lib/test/test_posixpath.py:679: def test_path_normpath(self):` — pre-existing *test method names*, not the `os._path_normpath` C helper. No hits in `Lib/posixpath.py`, `Lib/ntpath.py`, `Modules/posixmodule.c`.\n- `grep -n \"normpath\" Python-3.8.20/Modules/posixmodule.c` → **No matches found**. `os__path_normpath_impl` is absent.\n- `grep -rn \"_Py_normpath\" Python-3.8.20/Python/fileutils.c Python-3.8.20/Include/internal/pycore_fileutils.h` → **No matches found**. Neither the vulnerable `_Py_normpath()` nor the fix's `_Py_normpath_and_size()` exists — the entire C code path the CVE and its fix live in is absent from this branch.\n- `grep -n \"from posix import\\|from nt import\\|_path_normpath\" Lib/posixpath.py Lib/ntpath.py` → `Lib/posixpath.py`: no matches. `Lib/ntpath.py:259 from nt import _getvolumepathname`, `:518 from nt import _getfullpathname`, `:532 from nt import _getfinalpathname, readlink as _nt_readlink`, `:791 from nt import _isdir as isdir` — unrelated Windows helpers, none called from `normpath()`. No `_path_normpath` delegation.\n- `Lib/posixpath.py` `normpath()` (line 334 ff.) and `Lib/ntpath.py` `normpath()` (line 450 ff.) are the pure-Python split/filter/join implementations, operating only on Python `str`/`bytes` — no C NUL-terminated boundary is crossed.\n\n**Behavioural-equivalence check (behaviour, not just the symbol).** Behaviour of the bug: a path containing an embedded `\\0` is silently shortened at the first `\\0`, so a security check on the normalised path sees a shorter path than the one later opened. Executed our tarball's own `Lib/posixpath.py` / `Lib/ntpath.py`:\n\n```\nposixpath.normpath('/etc/passwd\\x00.png')    -> '/etc/passwd\\x00.png'   NUL preserved: True\nposixpath.normpath(b'/etc/passwd\\x00.png')   -> b'/etc/passwd\\x00.png'  NUL preserved: True\nposixpath.normpath('/foo/bar\\x00/../baz')    -> '/foo/baz'   (ordinary '..' collapse of component\n                                                              'bar\\x00', not truncation)\nntpath.normpath('C:\\\\foo\\\\bar\\x00\\\\..\\\\baz') -> 'C:\\\\foo\\\\baz'  (ditto)\n```",
          "product_ids": [
            "Alpine-Linux-3.24:alt-python38-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-dbg-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-debug-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-dev-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-doc-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-gdbm-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-idle-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pyc-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc0-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc1-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-pycache-pyc2-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-tests-3.8.20-r17.x86_64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.aarch64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r16.x86_64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.aarch64",
            "Alpine-Linux-3.24:alt-python38-tkinter-3.8.20-r17.x86_64"
          ]
        }
      ]
    }
  ]
}