Advisories » MGASA-2026-0421

Updated python-configargparse packages fix security vulnerabilities

Publication date: 20 Sep 2026
Modification date: 20 Sep 2026
Type: security
Affected Mageia releases : 10 , 9

Description

Config file or environment variable can trigger writing out a config
file, overwriting an arbitrary file and disclosing configuration values
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36321
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UWACSE6EO43FMBJWXK22JG7C3LAOLJ3Z/
• https://github.com/bw2/ConfigArgParse/security/advisories/GHSA-6m27-337c-jcgf

SRPMS

10/core

• python-configargparse-1.7.7-1.mga10

9/core

• python-configargparse-1.7.7-1.mga9