The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected.
When iterating over names of entries in a zip archive (for example, methods of "zipfile.Path" like "namelist()", "iterdir()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-chardetUpgrade python39-pycparserUpgrade python39-pyUpgrade python39-urllib3Upgrade python39-packagingUpgrade python3.12-testUpgrade python39-idleUpgrade python39-setuptoolsUpgrade python39-iniconfigUpgrade python39-numpyUpgrade python3-idleUpgrade python3-libsUpgrade python3-debugUpgrade python39-plyUpgrade python39-sixUpgrade python39-numpy-f2pyUpgrade python39-wcwidthUpgrade python3-develUpgrade python39-idnaUpgrade python39-pyparsingUpgrade python39-psycopg2-testsUpgrade python39-setuptools-wheelUpgrade python39-scipyUpgrade python3.11-libsUpgrade python39-pyyamlUpgrade python39-cffiUpgrade python3.12-libsUpgrade python39Upgrade python39-tomlUpgrade python39-rpm-macrosUpgrade python3.12-debugUpgrade python39-CythonUpgrade python3-tkinterUpgrade python39-pybind11-develUpgrade python3Upgrade python3.11-idleUpgrade python39-lxmlUpgrade python39-cryptographyUpgrade python39-pipUpgrade python3-testUpgrade python39-libs | Aug 30, 2024 | Aug 22, 2024 |
| Alpine Linux | — | Upgrade python3 | Oct 1, 2024 | Aug 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python38-libsUpgrade python38Upgrade python38-testUpgrade python38-debuginfoUpgrade python38-develUpgrade python38-debugUpgrade python38-tkinterUpgrade python38-tools | Nov 14, 2024 | Aug 22, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-libsUpgrade python3.9-debuginfoUpgrade python3.11-tkinterUpgrade python3.11-libsUpgrade python3.9-debugsourceUpgrade python3.11Upgrade python3.11-testUpgrade python3.11-debuginfoUpgrade python3-idleUpgrade python3Upgrade python-unversioned-commandUpgrade python3-testUpgrade python3.11-debugUpgrade python3-debugUpgrade python3-develUpgrade python3-tkinterUpgrade python3.11-debugsourceUpgrade python3.11-idleUpgrade python3.11-devel | Feb 17, 2025 | Aug 22, 2024 |
| Debian | — | Upgrade python3.9Upgrade pypy3Upgrade python3.13Upgrade python3.11 | Aug 28, 2024 | Aug 22, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/pypy.Upgrade dev-lang/python. | Jun 13, 2025 | Aug 22, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-unversioned-commandUpgrade python3 | Dec 12, 2024 | Aug 22, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Dec 12, 2024 | Aug 22, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory13 | Nov 6, 2024 | Aug 22, 2024 |
| Oracle_linux | — | Upgrade python3.11-debugUpgrade python3.12-libsUpgrade python39-debugUpgrade python39-tomlUpgrade python39-PyMySQLUpgrade python3.11-testUpgrade python3.12-tkinterUpgrade python3.11-tkinterUpgrade python3-tkinterUpgrade python39-mod_wsgiUpgrade python39-psycopg2-testsUpgrade python3.12-rpm-macrosUpgrade python39-scipyUpgrade python39-numpyUpgrade python39-testUpgrade python39-develUpgrade python39-pysocksUpgrade python3-idleUpgrade python3.12-debugUpgrade python3.11Upgrade python39-rpm-macrosUpgrade python3-testUpgrade python39-tkinterUpgrade python39-wheel-wheelUpgrade python3.12-develUpgrade python3Upgrade python39-plyUpgrade python39-psycopg2Upgrade python39-setuptoolsUpgrade python3.11-rpm-macrosUpgrade python39-psutilUpgrade python3-develUpgrade python-unversioned-commandUpgrade python3.11-develUpgrade python39-pip-wheelUpgrade python39-numpy-f2pyUpgrade python3.12Upgrade python3.11-idleUpgrade python3-libsUpgrade python39-pipUpgrade python39-pycparserUpgrade python39-idleUpgrade python39-lxmlUpgrade python39-numpy-docUpgrade python39-cryptographyUpgrade python3.11-libsUpgrade python39-requestsUpgrade python39-psycopg2-docUpgrade python39-sixUpgrade python3.12-idleUpgrade python39-pyyamlUpgrade python39Upgrade python39-chardetUpgrade python39-idnaUpgrade python39-libsUpgrade python39-wheelUpgrade python39-cffiUpgrade python3.12-testUpgrade python39-urllib3Upgrade python3-debugUpgrade python39-setuptools-wheel | Oct 16, 2024 | Aug 22, 2024 |
| Redhat_linux | — | Upgrade python39-pybind11Upgrade python-cryptography-debugsourceUpgrade python39-wcwidthUpgrade python39-psycopg2-testsUpgrade Cython-debugsourceUpgrade python39-pyparsingUpgrade python3.11-idleUpgrade python3-libsUpgrade python39-cryptography-debuginfoUpgrade python39-CythonUpgrade python39-idnaUpgrade python3.11-debuginfoUpgrade python-lxml-debugsourceUpgrade python3.12-debugUpgrade python3-idleUpgrade python39-sixUpgrade python39-debugsourceUpgrade python39-develUpgrade python39-packagingUpgrade python3.12-develUpgrade python39-tomlUpgrade python39-idleUpgrade python39-requestsUpgrade python39-lxmlNo solution existsUpgrade python39-numpyUpgrade python39-pycparserUpgrade python-unversioned-commandUpgrade python39-cffi-debuginfoUpgrade python39-pyyamlUpgrade python39-cryptographyUpgrade python39-pybind11-develUpgrade python39Upgrade python39-pyUpgrade python3-tkinterUpgrade python39-PyMySQLUpgrade python39-setuptools-wheelUpgrade python39-numpy-f2pyUpgrade python39-more-itertoolsUpgrade python39-wheelUpgrade python-psycopg2-debugsourceUpgrade python3.9-debuginfoUpgrade python3.11-libsUpgrade python39-chardetUpgrade python39-urllib3Upgrade python39-rpm-macrosUpgrade python3.12-testUpgrade python39-plyUpgrade python3.12-libsUpgrade python39-iniconfigUpgrade python3-develUpgrade python39-pluggyUpgrade scipy-debugsourceUpgrade python39-libsUpgrade python3.11Upgrade python3.12-debugsourceUpgrade python39-psycopg2Upgrade python3.9-debugsourceUpgrade python39-pip-wheelUpgrade python39-tkinterUpgrade python3-debugUpgrade python39-setuptoolsUpgrade python39-psutil-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-mod_wsgiUpgrade python39-debugUpgrade python39-pyyaml-debuginfoUpgrade python3.11-debugUpgrade python3.11-tkinterUpgrade python39-testUpgrade numpy-debugsourceUpgrade python39-psycopg2-debuginfoUpgrade python3-testUpgrade python39-numpy-debuginfoUpgrade python39-cffiUpgrade python-cffi-debugsourceUpgrade python3.11-debugsourceUpgrade python39-pipUpgrade PyYAML-debugsourceUpgrade python3.12-debuginfoUpgrade python3.12-tkinterUpgrade python39-pysocksUpgrade python39-pytestUpgrade python39-wheel-wheelUpgrade python39-psutilUpgrade python39-scipyUpgrade python39-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39-numpy-docUpgrade python3.12-idleUpgrade python3.12Upgrade python3.11-develUpgrade python3Upgrade python3.12-rpm-macrosUpgrade python39-psycopg2-docUpgrade python-psutil-debugsourceUpgrade python39-attrsUpgrade python39-lxml-debuginfoUpgrade python3.11-testUpgrade python3.11-rpm-macros | Sep 13, 2024 | Aug 22, 2024 |
| Rocky_linux | — | Upgrade python3.11-debugUpgrade python3.11-develUpgrade python39-psycopg2-debuginfoUpgrade python3.12-debugsourceUpgrade python3.12-develUpgrade python39-mod_wsgiUpgrade python39-numpyUpgrade python39-tkinterUpgrade python3.12-debuginfoUpgrade python3.12-libsUpgrade python39-scipyUpgrade python3.11-testUpgrade python3.11Upgrade python3.12Upgrade python3.11-tkinterUpgrade numpy-debugsourceUpgrade python39-debugUpgrade python39-develUpgrade python39-CythonUpgrade python-cryptography-debugsourceUpgrade PyYAML-debugsourceUpgrade python-cffi-debugsourceUpgrade python3.12-tkinterUpgrade python39-psycopg2Upgrade python3.12-debugUpgrade python39-psutilUpgrade python39-pybind11Upgrade python3.12-idleUpgrade python39-cffi-debuginfoUpgrade python39-debugsourceUpgrade Cython-debugsourceUpgrade python3.12-testUpgrade python3.11-debugsourceUpgrade python39-psycopg2-testsUpgrade python39-psycopg2-docUpgrade python-psycopg2-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-lxml-debuginfoUpgrade python39Upgrade scipy-debugsourceUpgrade python39-testUpgrade python39-Cython-debuginfoUpgrade python39-numpy-f2pyUpgrade python39-debuginfoUpgrade python3.11-idleUpgrade python39-numpy-debuginfoUpgrade python39-idleUpgrade python39-cryptographyUpgrade python39-psutil-debuginfoUpgrade python39-libsUpgrade python3.11-libsUpgrade python3.11-debuginfoUpgrade python-psutil-debugsourceUpgrade python-lxml-debugsourceUpgrade python39-pyyamlUpgrade python39-scipy-debuginfoUpgrade python39-cffiUpgrade python39-pybind11-develUpgrade python39-lxmlUpgrade python39-cryptography-debuginfo | Oct 2, 2024 | Aug 22, 2024 |
| Suse | — | Upgrade libpython3_11-1_0-32bitUpgrade python313-develUpgrade python313-baseUpgrade python313-doc-devhelpUpgrade python39-idleUpgrade python39-32bitUpgrade python39-testsuiteUpgrade python313-idleUpgrade python39-dbmUpgrade python310-base-32bitUpgrade python310-tkUpgrade python310Upgrade python310-toolsUpgrade python311-idleUpgrade python311-testsuiteUpgrade python39-docUpgrade python311-baseUpgrade libpython3_10-1_0-32bitUpgrade python310-docUpgrade python313-toolsUpgrade python311-dbmUpgrade python313-base-x86-64-v3Upgrade python312-toolsUpgrade python311-develUpgrade python310-testsuiteUpgrade libpython3_9-1_0-32bitUpgrade libpython3_11-1_0Upgrade python313-cursesUpgrade python311-doc-devhelpUpgrade python313-docUpgrade python310-cursesUpgrade python310-baseUpgrade python39-doc-devhelpUpgrade python312-base-32bitUpgrade python312-idleUpgrade python311-cursesUpgrade libpython3_13-1_0Upgrade python310-idleUpgrade python312-cursesUpgrade libpython3_13-1_0-x86-64-v3Upgrade libpython3_12-1_0Upgrade python310-doc-devhelpUpgrade python39-base-32bitUpgrade python311-base-32bitUpgrade python312-docUpgrade python311-docUpgrade python310-develUpgrade libpython3_12-1_0-32bitUpgrade python313Upgrade python312Upgrade python39-tkUpgrade python39-develUpgrade python313-dbmUpgrade python39Upgrade python313-tkUpgrade python312-tkUpgrade python311-toolsUpgrade python39-baseUpgrade python312-doc-devhelpUpgrade libpython3_10-1_0Upgrade python311-32bitUpgrade python39-toolsUpgrade python312-dbmUpgrade python39-cursesUpgrade python310-dbmUpgrade libpython3_9-1_0Upgrade python312-baseUpgrade python312-develUpgrade python312-32bitUpgrade python311Upgrade python310-32bitUpgrade python312-testsuiteUpgrade python311-tkUpgrade python313-x86-64-v3 | Dec 31, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade python3.12Upgrade python3.8-minimalUpgrade python3.10Upgrade python3.8Upgrade python3.12-minimalUpgrade python3.10-minimal | Sep 17, 2024 | Aug 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub