In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-PyMySQLUpgrade python38-pysocksUpgrade python2-docs-infoUpgrade python2-sqlalchemyUpgrade python38-cryptographyUpgrade python2-idnaUpgrade python2-pyyamlUpgrade python2-funcsigsUpgrade python2-psycopg2-debugUpgrade python38-markupsafeUpgrade python2-pytestUpgrade python2-CythonUpgrade python38-scipyUpgrade python38-CythonUpgrade python2-coverageUpgrade python38-psycopg2-docUpgrade python2-pytest-mockUpgrade python2-ipaddressUpgrade python2-docutilsUpgrade python38-psycopg2Upgrade python2-pyUpgrade python-psycopg2-docUpgrade python38-mod_wsgiUpgrade python2-docsUpgrade python2-psycopg2-testsUpgrade python2-requestsUpgrade python38-idnaUpgrade python38-asn1cryptoUpgrade python2-pluggyUpgrade python2-pytzUpgrade python2-setuptools_scmUpgrade python2-mockUpgrade python2-dnsUpgrade python38-psycopg2-testsUpgrade python38-pytzUpgrade python38-requestsUpgrade python38-cffiUpgrade python2-rpm-macrosUpgrade python2-markupsafeUpgrade python-sqlalchemy-docUpgrade python2-attrsUpgrade python2-chardetUpgrade python38-pycparserUpgrade python2-pysocksUpgrade python2-psycopg2Upgrade python38-chardet | May 4, 2022 | Jul 13, 2020 |
| Alpine Linux | — | Upgrade python3 | Aug 22, 2024 | Jul 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python3-debuginfoUpgrade python38-debugUpgrade tkinterUpgrade python3-libsUpgrade pythonUpgrade python38-tkinterUpgrade python-debugUpgrade python38-debuginfoUpgrade python38-develUpgrade python3-tkinterUpgrade python3-develUpgrade python38Upgrade python3-debugUpgrade python-toolsUpgrade python-testUpgrade python-libsUpgrade python38-libsUpgrade python3-toolsUpgrade python-debuginfoUpgrade python3Upgrade python38-testUpgrade python38-toolsUpgrade python-develUpgrade python3-test | Sep 3, 2020 | Jul 13, 2020 |
| Amazon_linux | — | Upgrade python36Upgrade python34Upgrade python35Upgrade python27Upgrade python36Upgrade python26 | Sep 1, 2020 | Jul 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2020 |
| Centos_linux | — | Upgrade python38-mod_wsgiUpgrade python38-pipUpgrade python2-wheel-wheelUpgrade python-nose-docsUpgrade python38-pyyaml-debuginfoUpgrade python2-bsonUpgrade scipy-debugsourceUpgrade python2-attrsUpgrade python2-mockUpgrade python2-coverageUpgrade python2-rpm-macrosUpgrade python2-wheelUpgrade python3-develUpgrade python3-debugsourceUpgrade python38-scipyUpgrade python38-numpyUpgrade platform-python-develUpgrade python38-psycopg2-debuginfoUpgrade python3-debuginfoUpgrade python2Upgrade python-toolsUpgrade python3-libsUpgrade python-psycopg2-docUpgrade python38-pip-wheelUpgrade python2-dnsUpgrade python38-sixUpgrade python38-setuptoolsUpgrade python2-backports-ssl_match_hostnameUpgrade python38Upgrade python2-docsUpgrade python38-markupsafeUpgrade python38-lxmlUpgrade python38-setuptools-wheelUpgrade python38-numpy-debuginfoUpgrade python2-psycopg2Upgrade python2-numpy-f2pyUpgrade python-cffi-debugsourceUpgrade python38-Cython-debuginfoUpgrade python-develUpgrade python2-virtualenvUpgrade python2-pytestUpgrade python-lxml-debugsourceUpgrade python38-chardetUpgrade python-psycopg2-debugsourceUpgrade python38-cffi-debuginfoUpgrade python38-pyyamlUpgrade python2-debugUpgrade python2-psycopg2-debugUpgrade python-coverage-debugsourceUpgrade python38-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-pysocksUpgrade python2-lxml-debuginfoUpgrade python2-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-psutilUpgrade python-debuginfoUpgrade python2-setuptools-wheelUpgrade python2-debugsourceUpgrade python2-testUpgrade platform-python-debugUpgrade python-debugUpgrade python2-sixUpgrade python2-pymongo-gridfsUpgrade python38-CythonUpgrade python38-plyUpgrade python38-babelUpgrade python38-jinja2Upgrade python38-debugUpgrade python38-idleUpgrade python3Upgrade python3-tkinterUpgrade python-pymongo-debugsourceUpgrade python2-Cython-debuginfoUpgrade python38-lxml-debuginfoUpgrade babelUpgrade python38-scipy-debuginfoUpgrade python3-idleUpgrade Cython-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-pipUpgrade python2-psycopg2-testsUpgrade python3-debugUpgrade platform-pythonUpgrade python2-chardetUpgrade python2-pyyaml-debuginfoUpgrade python38-wheel-wheelUpgrade python38-urllib3Upgrade python38-pysocksUpgrade python2-numpyUpgrade python38-wheelUpgrade python2-urllib3Upgrade python38-cffiUpgrade python2-toolsUpgrade python2-pluggyUpgrade python38-numpy-f2pyUpgrade python2-idnaUpgrade python2-jinja2Upgrade python-psycopg2-debuginfoUpgrade python-testUpgrade tkinterUpgrade python38-testUpgrade python38-pycparserUpgrade python38-psycopg2Upgrade python2-develUpgrade python2-lxmlUpgrade python2-coverage-debuginfoUpgrade python38-libsUpgrade python38-psycopg2-docUpgrade python38-asn1cryptoUpgrade python2-requestsUpgrade python2-setuptoolsUpgrade python2-pyUpgrade python2-pymongoUpgrade python3-testUpgrade python2-numpy-docUpgrade python2-numpy-debuginfoUpgrade python2-scipyUpgrade python2-markupsafeUpgrade python2-tkinterUpgrade python38-pytzUpgrade python38-numpy-docUpgrade python2-pytest-mockUpgrade python-cryptography-debugsourceUpgrade python-libsUpgrade python2-docs-infoUpgrade python-markupsafe-debugsourceUpgrade python38-PyMySQLUpgrade python2-bson-debuginfoUpgrade python2-ipaddressUpgrade python38-rpm-macrosUpgrade python38-requestsUpgrade python2-CythonUpgrade python2-funcsigsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pip-wheelUpgrade python38-cryptography-debuginfoUpgrade python38-develUpgrade python-sqlalchemy-docUpgrade python38-debuginfoUpgrade python2-pyyamlUpgrade python2-noseUpgrade python38-markupsafe-debuginfoUpgrade python38-psycopg2-testsUpgrade numpy-debugsourceUpgrade python2-pytzUpgrade python2-setuptools_scmUpgrade python2-pymongo-debuginfoUpgrade python2-scipy-debuginfoUpgrade python38-psutil-debuginfoUpgrade python2-PyMySQLUpgrade python2-babelUpgrade python-psutil-debugsourceUpgrade python2-pygmentsUpgrade python2-backportsUpgrade python38-cryptographyUpgrade python38-idnaUpgrade python2-libsUpgrade python38-tkinterUpgrade python2-sqlalchemyUpgrade python2-docutilsUpgrade python | Nov 5, 2020 | Jul 13, 2020 |
| Debian | — | Upgrade python2.7Upgrade python3.9Upgrade pypy3 | Aug 24, 2020 | Jul 13, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 1, 2021 |
| Freebsd | — | Upgrade python35 | Sep 21, 2020 | Sep 20, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Aug 4, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-devel | Nov 3, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pythonUpgrade tkinterUpgrade python-develUpgrade python-libs | Sep 28, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade tkinterUpgrade python-libsUpgrade python | Nov 2, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-testUpgrade python3Upgrade python3-develUpgrade python3-unversioned-commandUpgrade python3-libs | Jul 31, 2020 | Jul 13, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade runtime/python-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python-2/tkinter-27 to version 2.7.3-11.4.0.0.1.9.0 on Solaris 11.4 | Jan 19, 2021 | Jul 13, 2020 |
| Oracle_linux | — | Upgrade python2-toolsUpgrade python38-babelUpgrade python2-numpy-f2pyUpgrade python38-chardetUpgrade python3-develUpgrade python38-urllib3Upgrade platform-python-develUpgrade python2-pipUpgrade python38-jinja2Upgrade python2-pymongoUpgrade python2-testUpgrade python38-setuptoolsUpgrade python38-pipUpgrade python3-libsUpgrade python38-pysocksUpgrade python2-wheelUpgrade python2-rpm-macrosUpgrade python38-debugUpgrade python2-wheel-wheelUpgrade python2-psycopg2Upgrade python2-PyMySQLUpgrade python2-bsonUpgrade python2-pytestUpgrade python2-coverageUpgrade python2-sixUpgrade python2-psycopg2-debugUpgrade python38-plyUpgrade python2-backports-ssl_match_hostnameUpgrade python2-ipaddressUpgrade python2-pyyamlUpgrade python38-pyyamlUpgrade python-debugUpgrade python2-psycopg2-testsUpgrade babelUpgrade python2-docsUpgrade python2-lxmlUpgrade python2-virtualenvUpgrade python38-mod_wsgiUpgrade python2-attrsUpgrade python-toolsUpgrade python38-cryptographyUpgrade python38Upgrade python38-idleUpgrade python2-mockUpgrade python2-funcsigsUpgrade python3-idleUpgrade python2-sqlalchemyUpgrade python2-debugUpgrade platform-python-debugUpgrade python38-lxmlUpgrade python-develUpgrade python3-debugUpgrade python2-requestsUpgrade python2-noseUpgrade python2-dnsUpgrade python2-setuptools_scmUpgrade python3-tkinterUpgrade python38-CythonUpgrade python-psycopg2-docUpgrade python2-markupsafeUpgrade python38-psycopg2-testsUpgrade python38-develUpgrade python38-setuptools-wheelUpgrade python38-wheel-wheelUpgrade python38-numpyUpgrade python2-pip-wheelUpgrade python2-pytest-mockUpgrade python2-docs-infoUpgrade python38-psycopg2-docUpgrade python38-asn1cryptoUpgrade python38-tkinterUpgrade python38-requestsUpgrade python38-PyMySQLUpgrade python2-scipyUpgrade python2-pytzUpgrade python2-docutilsUpgrade pythonUpgrade python38-scipyUpgrade python38-wheelUpgrade python38-pytzUpgrade platform-pythonUpgrade python38-idnaUpgrade python38-cffiUpgrade python2-develUpgrade python38-sixUpgrade python2-libsUpgrade python2-pysocksUpgrade python2-setuptoolsUpgrade python3-testUpgrade python2-urllib3Upgrade tkinterUpgrade python38-psycopg2Upgrade python-sqlalchemy-docUpgrade python38-pip-wheelUpgrade python-testUpgrade python2-babelUpgrade python38-pycparserUpgrade python2-setuptools-wheelUpgrade python2-CythonUpgrade python38-numpy-f2pyUpgrade python3Upgrade python38-libsUpgrade python2-pluggyUpgrade python2-idnaUpgrade python38-numpy-docUpgrade python2-pymongo-gridfsUpgrade python2-backportsUpgrade python38-markupsafeUpgrade python2-chardetUpgrade python2-jinja2Upgrade python2-tkinterUpgrade python2-numpy-docUpgrade python38-rpm-macrosUpgrade python2-pygmentsUpgrade python2-pyUpgrade python2-numpyUpgrade python-libsUpgrade python-nose-docsUpgrade python38-psutilUpgrade python38-testUpgrade python2 | Nov 12, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade python2-pyyamlUpgrade python2-wheelUpgrade python38-lxml-debuginfoUpgrade python38-scipyUpgrade python2-coverage-debuginfoUpgrade python2-libsUpgrade python38-cffiUpgrade python2-psycopg2-debuginfoUpgrade python2-CythonUpgrade python38-markupsafeUpgrade PyYAML-debugsourceUpgrade python2-backports-ssl_match_hostnameUpgrade tkinterUpgrade python38-cffi-debuginfoUpgrade python2-psycopg2Upgrade python2-sixUpgrade python38-plyUpgrade python3-testUpgrade python38-scipy-debuginfoUpgrade python-nose-docsUpgrade python-pymongo-debugsourceUpgrade python2-debuginfoUpgrade python38-idleUpgrade python2-noseUpgrade scipy-debugsourceUpgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2-docUpgrade python38-cryptography-debuginfoUpgrade python38-setuptoolsUpgrade python38-setuptools-wheelUpgrade python-debuginfoUpgrade pythonUpgrade python38-pip-wheelUpgrade python2-Cython-debuginfoUpgrade python38-urllib3Upgrade python2-lxml-debuginfoUpgrade python38-idnaUpgrade python38-numpy-docUpgrade python2-wheel-wheelUpgrade python38-psutilUpgrade python-psycopg2-debuginfoUpgrade python2-psycopg2-testsUpgrade python38-numpyUpgrade python2-babelUpgrade python2-backportsUpgrade Cython-debugsourceUpgrade python38-testUpgrade python38-pysocksUpgrade python38-pyyaml-debuginfoUpgrade python2-setuptools-wheelUpgrade python-toolsUpgrade python2-debugUpgrade python38-babelUpgrade python-coverage-debugsourceUpgrade python2-mockUpgrade python-psutil-debugsourceUpgrade python2-rpm-macrosUpgrade python2-numpy-f2pyUpgrade python2-pipUpgrade python2-urllib3Upgrade python-lxml-debugsourceUpgrade python2-chardetUpgrade python-psycopg2-docUpgrade python38-psycopg2-testsUpgrade python38-PyMySQLUpgrade python-testUpgrade python38-cryptographyUpgrade python2-jinja2Upgrade python38Upgrade python38-chardetUpgrade python3Upgrade python38-libsUpgrade python38-debugsourceUpgrade python2-ipaddressUpgrade python2Upgrade python-libsUpgrade python38-debugUpgrade python2-pymongoUpgrade python38-debuginfoUpgrade platform-python-develUpgrade python2-coverageUpgrade python38-markupsafe-debuginfoUpgrade python2-virtualenvUpgrade python2-docs-infoUpgrade python2-sqlalchemyUpgrade python2-numpy-docUpgrade platform-python-debugUpgrade python2-PyMySQLUpgrade python3-debugUpgrade python2-pluggyUpgrade babelUpgrade python2-psycopg2-debugUpgrade python38-psycopg2Upgrade python2-pygmentsUpgrade python38-CythonUpgrade python38-develUpgrade python3-tkinterUpgrade python2-bson-debuginfoUpgrade python38-wheelUpgrade python-markupsafe-debugsourceUpgrade python2-scipyUpgrade python2-requestsUpgrade python2-lxmlUpgrade numpy-debugsourceUpgrade python38-pipUpgrade python38-mod_wsgiUpgrade python2-markupsafeUpgrade python2-dnsUpgrade python2-setuptools_scmUpgrade python2-attrsUpgrade python-pymongo-debuginfoUpgrade python38-jinja2Upgrade python38-rpm-macrosUpgrade python2-develUpgrade python2-pytest-mockUpgrade python2-docutilsUpgrade python38-pytzUpgrade python2-idnaUpgrade python38-sixUpgrade python3-debugsourceUpgrade python38-wheel-wheelUpgrade platform-pythonUpgrade python2-pytzUpgrade python2-pyyaml-debuginfoUpgrade python2-pysocksUpgrade python38-pyyamlUpgrade python38-requestsUpgrade python2-psycopg2-debug-debuginfoNo solution existsUpgrade python38-Cython-debuginfoUpgrade python2-setuptoolsUpgrade python38-numpy-f2pyUpgrade python-cffi-debugsourceUpgrade python2-pyUpgrade python3-libsUpgrade python2-numpy-debuginfoUpgrade python-sqlalchemy-docUpgrade python-psycopg2-debugsourceUpgrade python2-numpyUpgrade python3-develUpgrade python38-tkinterUpgrade python-debugUpgrade python-cryptography-debugsourceUpgrade python38-lxmlUpgrade python38-numpy-debuginfoUpgrade python2-tkinterUpgrade python-develUpgrade python2-pip-wheelUpgrade python3-debuginfoUpgrade python38-psutil-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-toolsUpgrade python38-asn1cryptoUpgrade python2-debugsourceUpgrade python2-pytestUpgrade python38-pycparserUpgrade python2-scipy-debuginfoUpgrade python2-bsonUpgrade python3-idleUpgrade python2-testUpgrade python2-pymongo-gridfsUpgrade python2-funcsigsUpgrade python2-docs | Nov 5, 2020 | Jul 13, 2020 |
| Rocky_linux | — | Upgrade python2-pymongoUpgrade python38-psycopg2Upgrade python2-psycopg2-debuginfoUpgrade python38-numpy-debuginfoUpgrade python2-scipy-debuginfoUpgrade python38-psutilUpgrade python-cffi-debugsourceUpgrade python2-psycopg2-debugUpgrade python38-Cython-debuginfoUpgrade scipy-debugsourceUpgrade python2-bsonUpgrade python38-scipy-debuginfoUpgrade python2-pymongo-gridfsUpgrade python38-cffiUpgrade python38-CythonUpgrade python38-numpy-f2pyUpgrade python38-psutil-debuginfoUpgrade python-markupsafe-debugsourceUpgrade python-pymongo-debugsourceUpgrade numpy-debugsourceUpgrade python2-coverage-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-markupsafeUpgrade python-psutil-debugsourceUpgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2-testsUpgrade python38-cryptography-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python-psycopg2-docUpgrade python2-sqlalchemyUpgrade python38-markupsafeUpgrade python38-pyyamlUpgrade Cython-debugsourceUpgrade PyYAML-debugsourceUpgrade python38-scipyUpgrade python38-mod_wsgiUpgrade python38-cffi-debuginfoUpgrade python38-numpyUpgrade python38-psycopg2-docUpgrade python38-cryptographyUpgrade python2-Cython-debuginfoUpgrade python2-pyyamlUpgrade python38-pyyaml-debuginfoUpgrade python2-CythonUpgrade python2-pymongo-debuginfoUpgrade python2-scipyUpgrade python2-psycopg2-testsUpgrade python-psycopg2-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-coverageUpgrade python2-psycopg2Upgrade python-coverage-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-bson-debuginfoUpgrade python-cryptography-debugsource | Mar 12, 2024 | Jul 13, 2020 |
| Suse | — | Upgrade python-xmlUpgrade python-doc-pdfUpgrade python-demoUpgrade python3-testsuiteUpgrade python-docUpgrade python39-dbmUpgrade python39-cursesUpgrade python3-doc-devhelpUpgrade libpython2_7-1_0-32bitUpgrade python3-docUpgrade python-develUpgrade python3Upgrade python-base-32bitUpgrade libpython2_7-1_0Upgrade python3-cursesUpgrade python3-32bitUpgrade python3-toolsUpgrade python3-develUpgrade python-32bitUpgrade python39-tkUpgrade libpython3_4m1_0-32bitUpgrade python-tkUpgrade python-baseUpgrade libpython3_6m1_0Upgrade libpython3_6m1_0-32bitUpgrade libpython3_4m1_0Upgrade python39-idleUpgrade python3-baseUpgrade python39-toolsUpgrade python-cursesUpgrade python36-baseUpgrade python36Upgrade python39Upgrade python3-dbmUpgrade python39-develUpgrade python3-tkUpgrade python3-idleUpgrade pythonUpgrade python3-base-32bitUpgrade libpython3_9-1_0Upgrade python-gdbmUpgrade python-idleUpgrade python39-base | Aug 13, 2020 | Jul 13, 2020 |
| Ubuntu | — | Upgrade python3.8Upgrade python3.5Upgrade python3.6 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.4 (Ubuntu Pro)Upgrade python3.7-minimalUpgrade python2.7-minimalUpgrade python2.7 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python3.8-minimalUpgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.6Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.7Upgrade python3.6-minimalUpgrade python2.7 | Aug 5, 2020 | Jul 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub