In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-CythonUpgrade python2-idnaUpgrade python2-docs-infoUpgrade python2-funcsigsUpgrade python2-sqlalchemyUpgrade python2-coverageUpgrade python38-psycopg2Upgrade python38-pysocksUpgrade python38-scipyUpgrade python38-CythonUpgrade python2-docutilsUpgrade python2-pyUpgrade python2-pytestUpgrade python2-pyyamlUpgrade python38-psycopg2-docUpgrade python2-PyMySQLUpgrade python2-pytest-mockUpgrade python38-markupsafeUpgrade python2-ipaddressUpgrade python2-psycopg2-debugUpgrade python38-cryptographyUpgrade python2-requestsUpgrade python2-psycopg2Upgrade python2-rpm-macrosUpgrade python38-mod_wsgiUpgrade python38-requestsUpgrade python2-mockUpgrade python2-markupsafeUpgrade python2-pysocksUpgrade python38-pycparserUpgrade python2-chardetUpgrade python-sqlalchemy-docUpgrade python38-chardetUpgrade python38-psycopg2-testsUpgrade python38-cffiUpgrade python2-pluggyUpgrade python2-dnsUpgrade python2-pytzUpgrade python38-pytzUpgrade python-psycopg2-docUpgrade python38-asn1cryptoUpgrade python2-psycopg2-testsUpgrade python2-setuptools_scmUpgrade python2-attrsUpgrade python38-idnaUpgrade python2-docs | May 4, 2022 | Jul 13, 2020 |
| Alpine Linux | — | Upgrade python3 | Aug 22, 2024 | Jul 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-toolsUpgrade python3-toolsUpgrade python3-testUpgrade python38-libsUpgrade python-debuginfoUpgrade python-libsUpgrade python-develUpgrade python-testUpgrade python3Upgrade python38-testUpgrade python38-toolsUpgrade python3-debugUpgrade python38Upgrade python-debugUpgrade tkinterUpgrade python38-debugUpgrade python38-develUpgrade pythonUpgrade python3-develUpgrade python3-libsUpgrade python3-tkinterUpgrade python38-tkinterUpgrade python3-debuginfoUpgrade python38-debuginfo | Sep 3, 2020 | Jul 13, 2020 |
| Amazon_linux | — | Upgrade python36Upgrade python34Upgrade python35Upgrade python26Upgrade python36Upgrade python27 | Sep 1, 2020 | Jul 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2020 |
| Centos_linux | — | Upgrade python2-lxml-debuginfoUpgrade python2-numpy-f2pyUpgrade babelUpgrade python2-docsUpgrade python2Upgrade python-pymongo-debugsourceUpgrade python2-mockUpgrade python38-lxml-debuginfoUpgrade python38-idleUpgrade python2-attrsUpgrade python2-rpm-macrosUpgrade python-debugUpgrade python38-pyyaml-debuginfoUpgrade python38-scipyUpgrade platform-python-debugUpgrade python2-sixUpgrade python2-pymongo-gridfsUpgrade python2-wheelUpgrade python3-tkinterUpgrade python38-markupsafeUpgrade python38-setuptools-wheelUpgrade python-nose-docsUpgrade python2-virtualenvUpgrade python38-cffi-debuginfoUpgrade python2-pytestUpgrade python38-CythonUpgrade python38-babelUpgrade python-debuginfoUpgrade python2-Cython-debuginfoUpgrade python38-lxmlUpgrade python38-plyUpgrade python2-testUpgrade python2-setuptools-wheelUpgrade python2-coverageUpgrade python2-wheel-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python38-jinja2Upgrade python-cffi-debugsourceUpgrade python38-pyyamlUpgrade python38Upgrade python38-chardetUpgrade python38-pipUpgrade python2-debuginfoUpgrade python3-idleUpgrade python-develUpgrade platform-python-develUpgrade python3-libsUpgrade python38-sixUpgrade python-psycopg2-docUpgrade python38-debugsourceUpgrade python-coverage-debugsourceUpgrade python38-psutilUpgrade python2-pysocksUpgrade python2-bsonUpgrade python-toolsUpgrade python2-psycopg2-testsUpgrade python3-develUpgrade python3-debugsourceUpgrade python2-psycopg2Upgrade python2-psycopg2-debugUpgrade python38-scipy-debuginfoUpgrade python2-pipUpgrade python2-debugUpgrade python-pymongo-debuginfoUpgrade python38-debugUpgrade python2-psycopg2-debuginfoUpgrade python38-psycopg2-debuginfoUpgrade Cython-debugsourceUpgrade python38-mod_wsgiUpgrade python38-Cython-debuginfoUpgrade python2-debugsourceUpgrade python3Upgrade python38-setuptoolsUpgrade python38-pip-wheelUpgrade python2-dnsUpgrade python3-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-numpyUpgrade scipy-debugsourceUpgrade python38-numpy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python-lxml-debugsourceUpgrade python38-develUpgrade python38-urllib3Upgrade python38-libsUpgrade python2-requestsUpgrade python2-numpy-debuginfoUpgrade python38-wheelUpgrade python2-toolsUpgrade python2-CythonUpgrade numpy-debugsourceUpgrade python2-setuptools_scmUpgrade python38-testUpgrade python2-scipy-debuginfoUpgrade python2-funcsigsUpgrade python38-idnaUpgrade python2-docutilsUpgrade python2-scipyUpgrade python-cryptography-debugsourceUpgrade python38-psutil-debuginfoUpgrade python38-numpy-docUpgrade python-markupsafe-debugsourceUpgrade python2-numpyUpgrade python-psycopg2-debuginfoUpgrade python2-idnaUpgrade python-testUpgrade python2-pymongoUpgrade python2-numpy-docUpgrade python2-pyUpgrade python2-setuptoolsUpgrade python2-pygmentsUpgrade python38-numpy-f2pyUpgrade python38-pycparserUpgrade python38-tkinterUpgrade python38-pytzUpgrade python3-testUpgrade python2-PyMySQLUpgrade python38-cffiUpgrade python2-libsUpgrade python2-urllib3Upgrade python2-sqlalchemyUpgrade python2-docs-infoUpgrade python38-PyMySQLUpgrade platform-pythonUpgrade python2-pip-wheelUpgrade tkinterUpgrade python-psutil-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-babelUpgrade python38-requestsUpgrade python38-rpm-macrosUpgrade python38-asn1cryptoUpgrade python2-pytest-mockUpgrade python2-chardetUpgrade python38-pysocksUpgrade python2-pyyaml-debuginfoUpgrade python38-psycopg2Upgrade python38-cryptographyUpgrade python2-lxmlUpgrade python2-backportsUpgrade pythonUpgrade python38-wheel-wheelUpgrade python2-pymongo-debuginfoUpgrade python2-jinja2Upgrade python3-debugUpgrade python2-pyyamlUpgrade python-sqlalchemy-docUpgrade python38-psycopg2-testsUpgrade python2-pytzUpgrade python38-cryptography-debuginfoUpgrade python2-tkinterUpgrade python38-psycopg2-docUpgrade python2-bson-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python2-ipaddressUpgrade python2-noseUpgrade python-libsUpgrade python38-debuginfoUpgrade python2-markupsafeUpgrade python2-pluggyUpgrade python2-devel | Nov 5, 2020 | Jul 13, 2020 |
| Debian | — | Upgrade pypy3Upgrade python3.9Upgrade python2.7 | Aug 24, 2020 | Jul 13, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 1, 2021 |
| Freebsd | — | Upgrade python35 | Sep 21, 2020 | Sep 20, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Aug 4, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | Nov 3, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade tkinterUpgrade pythonUpgrade python-devel | Sep 28, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade tkinterUpgrade python-develUpgrade pythonUpgrade python-libs | Nov 2, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unversioned-commandUpgrade python3-libsUpgrade python3-develUpgrade python3Upgrade python3-test | Jul 31, 2020 | Jul 13, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/python-2/tkinter-27 to version 2.7.3-11.4.0.0.1.9.0 on Solaris 11.4Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | Jul 13, 2020 |
| Oracle_linux | — | Upgrade python2-pluggyUpgrade python2-backportsUpgrade python-nose-docsUpgrade python2-babelUpgrade python2-idnaUpgrade python3Upgrade python3-testUpgrade python2-pysocksUpgrade python38-sixUpgrade python2-libsUpgrade python38-numpy-f2pyUpgrade python2-jinja2Upgrade python38-numpyUpgrade python2-pymongo-gridfsUpgrade python2-setuptools-wheelUpgrade platform-pythonUpgrade python2-markupsafeUpgrade python-libsUpgrade python2-pip-wheelUpgrade python2-pytest-mockUpgrade python2-urllib3Upgrade python38-libsUpgrade python-testUpgrade python38-psycopg2Upgrade python38-wheel-wheelUpgrade python2-develUpgrade python2-numpy-docUpgrade python-sqlalchemy-docUpgrade python38-psutilUpgrade python38-markupsafeUpgrade python2-pygmentsUpgrade python38-rpm-macrosUpgrade python38-psycopg2-docUpgrade python38-testUpgrade python2Upgrade python38-asn1cryptoUpgrade python38-pytzUpgrade python38-wheelUpgrade python2-docs-infoUpgrade python38-requestsUpgrade python38-develUpgrade python38-PyMySQLUpgrade python38-setuptools-wheelUpgrade python2-pytzUpgrade python2-scipyUpgrade python38-psycopg2-testsUpgrade python2-pyUpgrade python2-numpyUpgrade python38-idnaUpgrade pythonUpgrade python38-cffiUpgrade python2-setuptoolsUpgrade python2-docutilsUpgrade tkinterUpgrade python38-numpy-docUpgrade python2-tkinterUpgrade python2-CythonUpgrade python38-scipyUpgrade python38-pip-wheelUpgrade python38-pycparserUpgrade python38-tkinterUpgrade python2-chardetUpgrade python2-lxmlUpgrade python2-bsonUpgrade python-develUpgrade python38-urllib3Upgrade platform-python-debugUpgrade python38-debugUpgrade python38Upgrade python38-plyUpgrade python2-requestsUpgrade python2-dnsUpgrade python2-setuptools_scmUpgrade python38-jinja2Upgrade python3-libsUpgrade python2-wheelUpgrade python2-pipUpgrade python2-coverageUpgrade python2-backports-ssl_match_hostnameUpgrade platform-python-develUpgrade python38-setuptoolsUpgrade python38-pysocksUpgrade python38-pipUpgrade python3-idleUpgrade python2-sqlalchemyUpgrade python38-babelUpgrade python38-mod_wsgiUpgrade python3-tkinterUpgrade python3-debugUpgrade python38-chardetUpgrade python3-develUpgrade python2-wheel-wheelUpgrade python-psycopg2-docUpgrade python2-debugUpgrade python38-cryptographyUpgrade python2-funcsigsUpgrade python2-mockUpgrade python2-pymongoUpgrade python2-ipaddressUpgrade python2-testUpgrade python2-sixUpgrade python2-pyyamlUpgrade python2-virtualenvUpgrade python2-toolsUpgrade python2-psycopg2-testsUpgrade python2-numpy-f2pyUpgrade python2-docsUpgrade python2-attrsUpgrade python-toolsUpgrade babelUpgrade python38-pyyamlUpgrade python38-CythonUpgrade python2-rpm-macrosUpgrade python38-idleUpgrade python2-pytestUpgrade python2-PyMySQLUpgrade python2-psycopg2-debugUpgrade python2-noseUpgrade python38-lxmlUpgrade python-debugUpgrade python2-psycopg2 | Nov 12, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade python-cryptography-debugsourceNo solution existsUpgrade python-markupsafe-debugsourceUpgrade python38-pyyamlUpgrade python-cffi-debugsourceUpgrade python2-tkinterUpgrade python38-mod_wsgiUpgrade python2-docutilsUpgrade python2-ipaddressUpgrade python38-rpm-macrosUpgrade python3-tkinterUpgrade python38-pipUpgrade python38-debugUpgrade python3-develUpgrade python3-libsUpgrade python2-pip-wheelUpgrade python2-pyUpgrade python2-setuptools_scmUpgrade python38-pytzUpgrade python38-Cython-debuginfoUpgrade python38-CythonUpgrade python2-virtualenvUpgrade python2-pygmentsUpgrade python2-pytzUpgrade python38-develUpgrade python3-debugsourceUpgrade python2-scipy-debuginfoUpgrade python3-debuginfoUpgrade python2-funcsigsUpgrade python2-pyyaml-debuginfoUpgrade python2-bsonUpgrade python38-wheel-wheelUpgrade python2-toolsUpgrade python2-testUpgrade python38-lxmlUpgrade python2-sqlalchemyUpgrade python2-setuptoolsUpgrade python2-numpy-debuginfoUpgrade python2-lxmlUpgrade python2-PyMySQLUpgrade python2-pymongo-debuginfoUpgrade platform-pythonUpgrade python38-pycparserUpgrade python3-idleUpgrade python38-markupsafe-debuginfoUpgrade python38-asn1cryptoUpgrade python38-tkinterUpgrade python2-coverageUpgrade python38-numpy-debuginfoUpgrade python2-pluggyUpgrade python38-jinja2Upgrade python2-develUpgrade python2Upgrade python2-idnaUpgrade python-sqlalchemy-docUpgrade python-debugUpgrade python2-dnsUpgrade python38-sixUpgrade python2-requestsUpgrade python38-numpy-f2pyUpgrade numpy-debugsourceUpgrade python2-pysocksUpgrade python-develUpgrade python2-attrsUpgrade python38-debuginfoUpgrade python2-bson-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pymongo-gridfsUpgrade platform-python-develUpgrade platform-python-debugUpgrade python2-pytest-mockUpgrade python2-pytestUpgrade python2-numpyUpgrade python3-debugUpgrade python38-psutil-debuginfoUpgrade python38-requestsUpgrade python-pymongo-debuginfoUpgrade python2-pymongoUpgrade python2-numpy-docUpgrade python2-psycopg2-debugUpgrade python2-debugsourceUpgrade python-psycopg2-debugsourceUpgrade babelUpgrade python2-scipyUpgrade python2-docs-infoUpgrade python38-psycopg2Upgrade python-libsUpgrade python2-docsUpgrade python2-markupsafeUpgrade python38-wheelUpgrade python38-debugsourceUpgrade scipy-debugsourceUpgrade python-psycopg2-docUpgrade python-debuginfoUpgrade python38-scipy-debuginfoUpgrade python38-plyUpgrade python2-wheel-wheelUpgrade pythonUpgrade python2-Cython-debuginfoUpgrade python38-testUpgrade python38-psycopg2-testsUpgrade python2-backportsUpgrade python2-lxml-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-psycopg2Upgrade python38-chardetUpgrade python2-CythonUpgrade python2-wheelUpgrade python-psycopg2-debuginfoUpgrade python3Upgrade python2-coverage-debuginfoUpgrade python-lxml-debugsourceUpgrade python-toolsUpgrade python38-psycopg2-docUpgrade python2-jinja2Upgrade python-nose-docsUpgrade python-pymongo-debugsourceUpgrade python-coverage-debugsourceUpgrade python38-babelUpgrade python38-urllib3Upgrade python38-scipyUpgrade python38Upgrade python38-setuptoolsUpgrade python2-pipUpgrade PyYAML-debugsourceUpgrade python38-psutilUpgrade python38-idleUpgrade python3-testUpgrade python-testUpgrade python2-pyyamlUpgrade python2-debuginfoUpgrade python38-libsUpgrade python2-sixUpgrade python38-lxml-debuginfoUpgrade python2-libsUpgrade python38-pip-wheelUpgrade python38-psycopg2-debuginfoUpgrade python38-numpy-docUpgrade Cython-debugsourceUpgrade python38-cryptography-debuginfoUpgrade python2-noseUpgrade python38-numpyUpgrade python38-idnaUpgrade python38-setuptools-wheelUpgrade python38-cffi-debuginfoUpgrade python2-debugUpgrade python38-PyMySQLUpgrade python38-cryptographyUpgrade python2-psycopg2-testsUpgrade python2-babelUpgrade python2-rpm-macrosUpgrade python2-numpy-f2pyUpgrade python38-markupsafeUpgrade python2-chardetUpgrade python2-backports-ssl_match_hostnameUpgrade python2-psycopg2-debuginfoUpgrade python38-cffiUpgrade python2-urllib3Upgrade python2-mockUpgrade python38-pysocksUpgrade python38-pyyaml-debuginfoUpgrade python2-setuptools-wheelUpgrade tkinter | Nov 5, 2020 | Jul 13, 2020 |
| Rocky_linux | — | Upgrade python38-mod_wsgiUpgrade python2-psycopg2-testsUpgrade python2-pyyamlUpgrade python2-scipyUpgrade python2-Cython-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python38-cryptographyUpgrade PyYAML-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-psycopg2Upgrade python38-numpyUpgrade python-pymongo-debuginfoUpgrade Cython-debugsourceUpgrade python2-CythonUpgrade python38-psycopg2-docUpgrade python2-coverageUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-pyyamlUpgrade python2-bson-debuginfoUpgrade python38-scipyUpgrade python38-pyyaml-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python-cryptography-debugsourceUpgrade python38-cffi-debuginfoUpgrade python38-markupsafeUpgrade python-cffi-debugsourceUpgrade python-psutil-debugsourceUpgrade python38-CythonUpgrade python2-markupsafeUpgrade python2-coverage-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-pymongoUpgrade python38-numpy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python38-psycopg2Upgrade python2-scipy-debuginfoUpgrade python38-Cython-debuginfoUpgrade python2-bsonUpgrade python2-psycopg2-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade numpy-debugsourceUpgrade python-psycopg2-docUpgrade python38-psycopg2-testsUpgrade python38-psycopg2-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python38-cffiUpgrade python-markupsafe-debugsourceUpgrade scipy-debugsourceUpgrade python38-scipy-debuginfoUpgrade python38-numpy-f2pyUpgrade python-pymongo-debugsourceUpgrade python38-psutilUpgrade python38-psutil-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-sqlalchemyUpgrade python2-psycopg2-debug | Mar 12, 2024 | Jul 13, 2020 |
| Suse | — | Upgrade python3-32bitUpgrade python3-testsuiteUpgrade libpython2_7-1_0Upgrade python3-docUpgrade python-develUpgrade python-docUpgrade python-xmlUpgrade python3-toolsUpgrade python3-doc-devhelpUpgrade python3-cursesUpgrade python39-dbmUpgrade python3Upgrade libpython2_7-1_0-32bitUpgrade python-demoUpgrade python3-develUpgrade python-doc-pdfUpgrade python39-cursesUpgrade python-base-32bitUpgrade python39-baseUpgrade python39-idleUpgrade python-cursesUpgrade libpython3_9-1_0Upgrade python-32bitUpgrade python39-tkUpgrade python-gdbmUpgrade python3-dbmUpgrade pythonUpgrade python39-toolsUpgrade python3-base-32bitUpgrade python3-idleUpgrade python3-baseUpgrade python-baseUpgrade libpython3_6m1_0Upgrade libpython3_4m1_0-32bitUpgrade python39-develUpgrade python36-baseUpgrade libpython3_4m1_0Upgrade python-tkUpgrade python39Upgrade python36Upgrade libpython3_6m1_0-32bitUpgrade python-idleUpgrade python3-tk | Aug 13, 2020 | Jul 13, 2020 |
| Ubuntu | — | Upgrade python3.6Upgrade python3.7Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.8-minimalUpgrade python3.5 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.6-minimalUpgrade python2.7Upgrade python2.7 (Ubuntu Pro)Upgrade python3.7-minimalUpgrade python3.4-minimal (Ubuntu Pro)Upgrade python2.7-minimalUpgrade python3.4 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.5Upgrade python3.8Upgrade python3.5-minimal | Aug 5, 2020 | Jul 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub