In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python38-pysocksUpgrade python2-pytest-mockUpgrade python2-coverageUpgrade python38-psycopg2Upgrade python2-docutilsUpgrade python2-pyUpgrade python2-funcsigsUpgrade python2-ipaddressUpgrade python38-markupsafeUpgrade python2-sqlalchemyUpgrade python2-PyMySQLUpgrade python2-CythonUpgrade python2-idnaUpgrade python2-psycopg2-debugUpgrade python38-scipyUpgrade python38-CythonUpgrade python2-pytestUpgrade python2-docs-infoUpgrade python2-pyyamlUpgrade python38-cryptographyUpgrade python38-psycopg2-docUpgrade python2-pysocksUpgrade python-psycopg2-docUpgrade python38-pycparserUpgrade python38-idnaUpgrade python2-psycopg2Upgrade python38-chardetUpgrade python2-setuptools_scmUpgrade python2-dnsUpgrade python2-markupsafeUpgrade python38-mod_wsgiUpgrade python2-attrsUpgrade python2-docsUpgrade python38-cffiUpgrade python2-requestsUpgrade python38-psycopg2-testsUpgrade python2-pytzUpgrade python2-rpm-macrosUpgrade python2-mockUpgrade python2-psycopg2-testsUpgrade python2-pluggyUpgrade python38-asn1cryptoUpgrade python-sqlalchemy-docUpgrade python38-requestsUpgrade python2-chardetUpgrade python38-pytz | May 4, 2022 | Jul 13, 2020 |
| Alpine Linux | — | Upgrade python3 | Aug 22, 2024 | Jul 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python3Upgrade python3-toolsUpgrade python38-libsUpgrade python38-testUpgrade python3-testUpgrade python-develUpgrade python-toolsUpgrade python3-debugUpgrade python38-toolsUpgrade python-debuginfoUpgrade python38Upgrade python-libsUpgrade python-testUpgrade python38-tkinterUpgrade python38-debugUpgrade python38-debuginfoUpgrade python3-libsUpgrade pythonUpgrade python3-develUpgrade python38-develUpgrade python-debugUpgrade python3-debuginfoUpgrade tkinterUpgrade python3-tkinter | Sep 3, 2020 | Jul 13, 2020 |
| Amazon_linux | — | Upgrade python35Upgrade python27Upgrade python26Upgrade python36Upgrade python36Upgrade python34 | Sep 1, 2020 | Jul 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2020 |
| Centos_linux | — | Upgrade python2-wheelUpgrade python38-pyyaml-debuginfoUpgrade python2-debuginfoUpgrade python3-tkinterUpgrade python38-pip-wheelUpgrade python-lxml-debugsourceUpgrade python2-pipUpgrade python2-docsUpgrade python2-sixUpgrade python2-mockUpgrade python38-setuptoolsUpgrade python38-numpyUpgrade python38-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-numpy-f2pyUpgrade python2-bsonUpgrade python2-psycopg2Upgrade python3-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-testUpgrade python2-setuptools-wheelUpgrade python38-lxml-debuginfoUpgrade python38-psutilUpgrade python-debugUpgrade platform-python-debugUpgrade python38-jinja2Upgrade python-pymongo-debugsourceUpgrade python2-lxml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python38-pyyamlUpgrade Cython-debugsourceUpgrade python2-pytestUpgrade python38-markupsafeUpgrade python2-pymongo-gridfsUpgrade python38-sixUpgrade python2-coverageUpgrade python2-virtualenvUpgrade python2Upgrade python3-libsUpgrade python38-cffi-debuginfoUpgrade python2-wheel-wheelUpgrade platform-python-develUpgrade python38-lxmlUpgrade python38-setuptools-wheelUpgrade python38-scipyUpgrade python38-babelUpgrade python-psycopg2-docUpgrade scipy-debugsourceUpgrade python38-numpy-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python-toolsUpgrade python-nose-docsUpgrade python2-psycopg2-debuginfoUpgrade python3-develUpgrade python38-mod_wsgiUpgrade python38-Cython-debuginfoUpgrade python2-rpm-macrosUpgrade python38-debugUpgrade python-develUpgrade python38-chardetUpgrade python2-Cython-debuginfoUpgrade python-pymongo-debuginfoUpgrade python38-plyUpgrade python2-attrsUpgrade python38Upgrade python-cffi-debugsourceUpgrade python38-CythonUpgrade babelUpgrade python3-idleUpgrade python2-backports-ssl_match_hostnameUpgrade python38-idleUpgrade python3Upgrade python2-debugsourceUpgrade python-debuginfoUpgrade python2-pysocksUpgrade python38-scipy-debuginfoUpgrade python3-debugsourceUpgrade python2-debugUpgrade python38-psycopg2-debuginfoUpgrade python2-dnsUpgrade python38-pipUpgrade python2-docutilsUpgrade python38-develUpgrade python38-requestsUpgrade python38-libsUpgrade python2-babelUpgrade python3-testUpgrade python2-pytest-mockUpgrade python2-pyUpgrade python2-develUpgrade python-cryptography-debugsourceUpgrade python2-backportsUpgrade python2-jinja2Upgrade python2-tkinterUpgrade python-sqlalchemy-docUpgrade python38-cryptography-debuginfoUpgrade python38-psycopg2-testsUpgrade python2-pyyamlUpgrade python2-pytzUpgrade numpy-debugsourceUpgrade python2-urllib3Upgrade python2-sqlalchemyUpgrade python-markupsafe-debugsourceUpgrade python38-psutil-debuginfoUpgrade python38-pysocksUpgrade python3-debugUpgrade python2-coverage-debuginfoUpgrade python2-numpyUpgrade python2-docs-infoUpgrade python38-wheelUpgrade python2-pymongo-debuginfoUpgrade python38-cffiUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python38-pytzUpgrade python38-idnaUpgrade python2-pluggyUpgrade python38-markupsafe-debuginfoUpgrade python38-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-noseUpgrade python2-pip-wheelUpgrade python38-urllib3Upgrade python2-lxmlUpgrade pythonUpgrade python38-PyMySQLUpgrade python2-libsUpgrade python-libsUpgrade python2-pygmentsUpgrade python2-CythonUpgrade python2-PyMySQLUpgrade python38-cryptographyUpgrade python2-funcsigsUpgrade python-psutil-debugsourceUpgrade python2-scipy-debuginfoUpgrade python2-setuptools_scmUpgrade python38-tkinterUpgrade python38-numpy-docUpgrade python2-bson-debuginfoUpgrade python38-rpm-macrosUpgrade python2-toolsUpgrade python38-wheel-wheelUpgrade tkinterUpgrade python2-chardetUpgrade platform-pythonUpgrade python2-numpy-docUpgrade python38-testUpgrade python2-numpy-debuginfoUpgrade python2-markupsafeUpgrade python38-psycopg2Upgrade python38-pycparserUpgrade python2-idnaUpgrade python2-pyyaml-debuginfoUpgrade python-testUpgrade python38-numpy-f2pyUpgrade python38-asn1cryptoUpgrade python38-psycopg2-docUpgrade python-psycopg2-debuginfoUpgrade python2-requestsUpgrade python2-setuptoolsUpgrade python2-pymongo | Nov 5, 2020 | Jul 13, 2020 |
| Debian | — | Upgrade python2.7Upgrade python3.9Upgrade pypy3 | Aug 24, 2020 | Jul 13, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 1, 2021 |
| Freebsd | — | Upgrade python35 | Sep 21, 2020 | Sep 20, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Aug 4, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade pythonUpgrade python-develUpgrade python-libs | Nov 3, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade python-develUpgrade tkinterUpgrade python | Sep 28, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-libsUpgrade pythonUpgrade python-develUpgrade tkinter | Nov 2, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-testUpgrade python3Upgrade python3-libsUpgrade python3-unversioned-commandUpgrade python3-devel | Jul 31, 2020 | Jul 13, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python-2/tkinter-27 to version 2.7.3-11.4.0.0.1.9.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | Jul 13, 2020 |
| Oracle_linux | — | Upgrade python2-chardetUpgrade python38-idnaUpgrade python38-setuptools-wheelUpgrade python38-psutilUpgrade python38-markupsafeUpgrade python2-pyUpgrade python-nose-docsUpgrade python2-pluggyUpgrade python38-asn1cryptoUpgrade python38-rpm-macrosUpgrade python38-develUpgrade python2Upgrade python2-CythonUpgrade python2-pygmentsUpgrade python2-babelUpgrade python38-psycopg2Upgrade python38-tkinterUpgrade python2-pytest-mockUpgrade python2-setuptools-wheelUpgrade python2-numpyUpgrade python38-numpyUpgrade python38-numpy-docUpgrade python-libsUpgrade python2-markupsafeUpgrade python2-pip-wheelUpgrade python38-numpy-f2pyUpgrade python2-setuptoolsUpgrade python-testUpgrade python2-urllib3Upgrade python2-libsUpgrade python2-develUpgrade python2-pysocksUpgrade python3Upgrade python3-testUpgrade python38-cffiUpgrade python38-sixUpgrade python38-psycopg2-testsUpgrade python38-wheel-wheelUpgrade python38-pip-wheelUpgrade python38-pycparserUpgrade python2-docs-infoUpgrade python38-pytzUpgrade python38-testUpgrade platform-pythonUpgrade python2-pymongo-gridfsUpgrade python38-scipyUpgrade python-sqlalchemy-docUpgrade python38-libsUpgrade python2-scipyUpgrade tkinterUpgrade python38-requestsUpgrade python2-pytzUpgrade python38-psycopg2-docUpgrade python2-jinja2Upgrade python2-tkinterUpgrade python2-idnaUpgrade python2-numpy-docUpgrade python2-docutilsUpgrade python38-PyMySQLUpgrade python2-backportsUpgrade python38-wheelUpgrade pythonUpgrade python2-backports-ssl_match_hostnameUpgrade python2-ipaddressUpgrade python38-lxmlUpgrade python2-requestsUpgrade python38-pysocksUpgrade python38-jinja2Upgrade python2-coverageUpgrade platform-python-develUpgrade python38-setuptoolsUpgrade python3-develUpgrade python38-mod_wsgiUpgrade python2-virtualenvUpgrade python2-toolsUpgrade python2-psycopg2-testsUpgrade python2-numpy-f2pyUpgrade python2-docsUpgrade python2-attrsUpgrade python-toolsUpgrade babelUpgrade python38-pyyamlUpgrade python38-CythonUpgrade python2-noseUpgrade python-debugUpgrade platform-python-debugUpgrade python-develUpgrade python38-idleUpgrade python3-idleUpgrade python2-wheel-wheelUpgrade python2-sqlalchemyUpgrade python2-dnsUpgrade python-psycopg2-docUpgrade python38-urllib3Upgrade python38-chardetUpgrade python38-babelUpgrade python3-tkinterUpgrade python3-debugUpgrade python2-setuptools_scmUpgrade python38-debugUpgrade python2-pytestUpgrade python2-PyMySQLUpgrade python2-psycopg2-debugUpgrade python2-bsonUpgrade python2-psycopg2Upgrade python2-funcsigsUpgrade python2-rpm-macrosUpgrade python38-pipUpgrade python3-libsUpgrade python2-wheelUpgrade python38-plyUpgrade python38-cryptographyUpgrade python2-pipUpgrade python38Upgrade python2-mockUpgrade python2-lxmlUpgrade python2-debugUpgrade python2-testUpgrade python2-sixUpgrade python2-pymongoUpgrade python2-pyyaml | Nov 12, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade python38-psycopg2-testsUpgrade python38-cryptography-debuginfoUpgrade python2-rpm-macrosUpgrade python-coverage-debugsourceUpgrade python2-urllib3Upgrade python38-lxml-debuginfoUpgrade python38-babelUpgrade python38-numpy-docUpgrade python3Upgrade python2-wheelUpgrade python38-psutilUpgrade python38-cffi-debuginfoUpgrade python2-mockUpgrade python-psycopg2-docUpgrade python2-libsUpgrade python38-setuptools-wheelUpgrade python38-cffiUpgrade Cython-debugsourceUpgrade python38-idnaUpgrade python2-noseUpgrade python38-psycopg2-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python38-PyMySQLUpgrade python2-debugUpgrade python2-pipUpgrade python2-psycopg2Upgrade python2-chardetUpgrade python-lxml-debugsourceUpgrade python2-setuptools-wheelUpgrade python2-numpy-f2pyUpgrade python-testUpgrade python2-psycopg2-testsUpgrade python2-CythonUpgrade python2-pyyamlUpgrade python2-babelUpgrade python2-backports-ssl_match_hostnameUpgrade python38-scipyUpgrade tkinterUpgrade python-nose-docsUpgrade python38-scipy-debuginfoUpgrade python38-idleUpgrade python2-sixUpgrade python-pymongo-debugsourceUpgrade python38-plyUpgrade python2-debuginfoUpgrade python38-cryptographyUpgrade python38-markupsafeUpgrade python38-chardetUpgrade python38-pip-wheelUpgrade python2-coverage-debuginfoUpgrade python38-numpyUpgrade python2-backportsUpgrade PyYAML-debugsourceUpgrade python38-psycopg2-docUpgrade python38-testUpgrade python-toolsUpgrade python2-jinja2Upgrade python38-urllib3Upgrade python2-lxml-debuginfoUpgrade scipy-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python38-setuptoolsUpgrade python38Upgrade pythonUpgrade python2-Cython-debuginfoUpgrade python38-debugsourceUpgrade python2-wheel-wheelUpgrade python38-libsUpgrade python-debuginfoUpgrade python3-testUpgrade python38-pyyaml-debuginfoUpgrade python38-pysocksUpgrade python2-idnaUpgrade python38-markupsafe-debuginfoUpgrade python-sqlalchemy-docUpgrade python2-dnsUpgrade python2-attrsUpgrade python2Upgrade python38-pycparserUpgrade numpy-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-pytzUpgrade python2-PyMySQLUpgrade python2-docs-infoUpgrade python38-CythonUpgrade python-pymongo-debuginfoUpgrade python38-asn1cryptoUpgrade python2-pluggyUpgrade python3-idleUpgrade python38-rpm-macrosUpgrade python2-sqlalchemyUpgrade python38-pyyamlUpgrade python38-develUpgrade python2-bsonUpgrade python2-pyyaml-debuginfoUpgrade python-markupsafe-debugsourceUpgrade python38-wheel-wheelUpgrade python2-scipy-debuginfoUpgrade python2-funcsigsUpgrade platform-pythonUpgrade python38-requestsUpgrade python38-debuginfoUpgrade python38-pipUpgrade python2-pytestUpgrade python38-tkinterUpgrade python2-testUpgrade python2-numpy-docUpgrade python2-psycopg2-debugUpgrade python-debugUpgrade python2-virtualenvUpgrade python2-markupsafeUpgrade python2-scipyUpgrade python38-psycopg2Upgrade python2-setuptoolsUpgrade python38-wheelUpgrade python38-numpy-f2pyUpgrade python2-coverageUpgrade python2-docsUpgrade python2-toolsUpgrade python3-debugsourceNo solution existsUpgrade python3-debugUpgrade python38-psutil-debuginfoUpgrade python2-numpyUpgrade python-cffi-debugsourceUpgrade python2-pymongo-gridfsUpgrade python3-tkinterUpgrade python2-tkinterUpgrade babelUpgrade python2-pymongoUpgrade python2-bson-debuginfoUpgrade platform-python-develUpgrade python2-docutilsUpgrade platform-python-debugUpgrade python2-pytest-mockUpgrade python38-mod_wsgiUpgrade python38-sixUpgrade python2-requestsUpgrade python2-numpy-debuginfoUpgrade python-libsUpgrade python38-jinja2Upgrade python2-psycopg2-debug-debuginfoUpgrade python2-pygmentsUpgrade python2-ipaddressUpgrade python2-lxmlUpgrade python2-develUpgrade python2-debugsourceUpgrade python38-numpy-debuginfoUpgrade python2-pysocksUpgrade python3-debuginfoUpgrade python38-lxmlUpgrade python3-develUpgrade python2-pip-wheelUpgrade python-develUpgrade python2-setuptools_scmUpgrade python38-Cython-debuginfoUpgrade python-cryptography-debugsourceUpgrade python3-libsUpgrade python2-pyUpgrade python38-debugUpgrade python38-pytz | Nov 5, 2020 | Jul 13, 2020 |
| Rocky_linux | — | Upgrade python2-bson-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python-cryptography-debugsourceUpgrade python38-pyyamlUpgrade PyYAML-debugsourceUpgrade python38-scipyUpgrade python38-pyyaml-debuginfoUpgrade python2-pyyamlUpgrade python38-psycopg2-docUpgrade python38-cryptographyUpgrade Cython-debugsourceUpgrade python2-CythonUpgrade python38-numpyUpgrade python38-mod_wsgiUpgrade python2-psycopg2-testsUpgrade python2-pymongo-debuginfoUpgrade python2-scipyUpgrade python-coverage-debugsourceUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2Upgrade python2-coverageUpgrade python-psycopg2-debuginfoUpgrade python-pymongo-debuginfoUpgrade python38-cffi-debuginfoUpgrade python38-markupsafeUpgrade python38-psutil-debuginfoUpgrade python2-bsonUpgrade python38-psycopg2-testsUpgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2Upgrade python-psycopg2-debugsourceUpgrade python-psutil-debugsourceUpgrade python38-psutilUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade python2-pyyaml-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-sqlalchemyUpgrade python2-psycopg2-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python-psycopg2-docUpgrade python2-scipy-debuginfoUpgrade python-pymongo-debugsourceUpgrade scipy-debugsourceUpgrade python38-scipy-debuginfoUpgrade python38-CythonUpgrade python2-coverage-debuginfoUpgrade python-markupsafe-debugsourceUpgrade python38-cffiUpgrade python2-markupsafeUpgrade python38-numpy-f2pyUpgrade python38-numpy-debuginfoUpgrade python38-Cython-debuginfoUpgrade numpy-debugsourceUpgrade python-cffi-debugsourceUpgrade python38-cryptography-debuginfo | Mar 12, 2024 | Jul 13, 2020 |
| Suse | — | Upgrade pythonUpgrade python3-idleUpgrade python36-baseUpgrade python-cursesUpgrade libpython3_4m1_0Upgrade python39-baseUpgrade python3-baseUpgrade python39-develUpgrade python39-toolsUpgrade python-32bitUpgrade libpython3_6m1_0-32bitUpgrade python39-tkUpgrade python36Upgrade python39Upgrade libpython3_9-1_0Upgrade python39-idleUpgrade python-idleUpgrade python3-base-32bitUpgrade libpython3_4m1_0-32bitUpgrade python3-tkUpgrade libpython3_6m1_0Upgrade python-baseUpgrade python-tkUpgrade python-gdbmUpgrade python3-dbmUpgrade python39-cursesUpgrade python-doc-pdfUpgrade python3-32bitUpgrade python3-cursesUpgrade python-xmlUpgrade python39-dbmUpgrade python-demoUpgrade python3-toolsUpgrade python-base-32bitUpgrade python3-develUpgrade python3-testsuiteUpgrade libpython2_7-1_0-32bitUpgrade python3Upgrade libpython2_7-1_0Upgrade python3-docUpgrade python-docUpgrade python3-doc-devhelpUpgrade python-devel | Aug 13, 2020 | Jul 13, 2020 |
| Ubuntu | — | Upgrade python3.5 (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.6-minimalUpgrade python3.7Upgrade python2.7Upgrade python3.8-minimalUpgrade python3.6Upgrade python2.7-minimalUpgrade python3.7-minimalUpgrade python3.4 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.5Upgrade python3.8Upgrade python3.6 (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python3.4-minimal (Ubuntu Pro) | Aug 5, 2020 | Jul 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub