An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.11-testUpgrade python3.11Upgrade python3.11-libsUpgrade python3.11-rpm-macrosUpgrade python3.11-develUpgrade python3.11-idleUpgrade python3.11-debugUpgrade python3.11-tkinter | Nov 16, 2023 | Aug 23, 2023 |
| Amazon_linux_2023 | — | Upgrade python3.11-libsUpgrade python3.11-idleUpgrade python3.11-debugsourceUpgrade python3.11-debuginfoUpgrade python3.11-develUpgrade python3.11Upgrade python3.11-testUpgrade python3.11-tkinterUpgrade python3.11-debug | Feb 17, 2025 | Aug 23, 2023 |
| Centos_linux | — | Upgrade python3.11-debugsourceUpgrade python3.11-libsUpgrade python3.11-tkinterUpgrade python3.11-rpm-macrosUpgrade python3.11Upgrade python3.11-debuginfoUpgrade python3.11-devel | Nov 8, 2023 | Aug 23, 2023 |
| Debian | — | Upgrade python3.11 | Jul 30, 2024 | Aug 23, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/python.Upgrade dev-python/pypy3.Upgrade dev-python/pypy3_9.Upgrade dev-python/pypy3_10. | May 6, 2024 | Aug 23, 2023 |
| Oracle_linux | — | Upgrade python3.11-debugUpgrade python3.11-testUpgrade python3.11-develUpgrade python3.11-rpm-macrosUpgrade python3.11-tkinterUpgrade python3.11Upgrade python3.11-libsUpgrade python3.11-idle | Nov 22, 2023 | Aug 23, 2023 |
| Rapid7 Insightagent | — | Upgrade Rapid7 Insight Agent to version 4.0.6.14 | Mar 19, 2024 | Aug 23, 2023 |
| Redhat_linux | — | Upgrade python3.11-idleUpgrade python3.11-testUpgrade python3.11-tkinterUpgrade python3.11-libsUpgrade python3.11Upgrade python3.11-debugsourceUpgrade python3.11-rpm-macrosUpgrade python3.11-debuginfoUpgrade python3.11-develUpgrade python3.11-debug | Nov 8, 2023 | Aug 23, 2023 |
| Suse | — | Upgrade libpython3_11-1_0-32bitUpgrade python311-base-32bitUpgrade python311-dbmUpgrade python3-baseUpgrade python3-dbmUpgrade python3Upgrade python311-testsuiteUpgrade python311-toolsUpgrade libpython3_4m1_0-32bitUpgrade python311-idleUpgrade python311-baseUpgrade libpython3_11-1_0Upgrade python311-develUpgrade python311-doc-devhelpUpgrade python311Upgrade python3-tkUpgrade python3-develUpgrade python311-docUpgrade python3-cursesUpgrade python311-32bitUpgrade python311-tkUpgrade python311-cursesUpgrade libpython3_4m1_0 | Oct 4, 2023 | Aug 23, 2023 |
| Ubuntu | — | Upgrade python3.11Upgrade python3.10Upgrade python3.10-minimalUpgrade python3.11 (Ubuntu Pro)Upgrade python3.11-minimal (Ubuntu Pro) | Dec 12, 2023 | Aug 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 23, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub