The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.
The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-setuptools-wheelUpgrade python39-urllib3Upgrade python3-debugUpgrade platform-pythonUpgrade python39-pysocksUpgrade python39-wcwidthUpgrade python3.11-libsUpgrade python39-pybind11-develUpgrade python39-wheelUpgrade python39-lxmlUpgrade python3.12Upgrade python39-idleUpgrade python39-psutilUpgrade python39-pybind11Upgrade python39-cffiUpgrade python39-sixUpgrade python39-setuptoolsUpgrade python39-cryptographyUpgrade python39-numpy-docUpgrade python39-pipUpgrade python3.12-testUpgrade python39-requestsUpgrade python39-plyUpgrade python39-pyUpgrade python39-libsUpgrade python39-pyyamlUpgrade python39-psycopg2Upgrade python3-libsUpgrade python39-mod_wsgiUpgrade python39-numpy-f2pyUpgrade platform-python-develUpgrade python39Upgrade python39-pycparserUpgrade python39-chardetUpgrade python3.11-idleUpgrade python39-idnaUpgrade python3.12-debugUpgrade python39-tkinterUpgrade python39-pyparsingUpgrade platform-python-debugUpgrade python39-iniconfigUpgrade python3.11-debugUpgrade python39-wheel-wheelUpgrade python39-rpm-macrosUpgrade python3.12-rpm-macrosUpgrade python39-develUpgrade python3-develUpgrade python3.11-tkinterUpgrade python39-CythonUpgrade python3.11Upgrade python3.11-testUpgrade python39-packagingUpgrade python3-tkinterUpgrade python39-psycopg2-testsUpgrade python3.12-idleUpgrade python39-pip-wheelUpgrade python39-numpyUpgrade python3.11-rpm-macrosUpgrade python39-scipyUpgrade python39-debugUpgrade python39-PyMySQLUpgrade python-unversioned-commandUpgrade python3.12-develUpgrade python39-more-itertoolsUpgrade python39-psycopg2-docUpgrade python3.11-develUpgrade python3.12-tkinterUpgrade python39-pluggyUpgrade python39-attrsUpgrade python39-testUpgrade python39-tomlUpgrade python3Upgrade python3-idleUpgrade python3-testUpgrade python39-pytestUpgrade python3.12-libs | May 31, 2024 | Mar 19, 2024 |
| Alpine Linux | — | Upgrade python3 | Mar 26, 2024 | Mar 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python38-debuginfoUpgrade python38-tkinterUpgrade python-develUpgrade python3-testUpgrade python-toolsUpgrade python3-debugUpgrade python38-testUpgrade tkinterUpgrade python-testUpgrade python3Upgrade python-libsUpgrade python38-libsUpgrade python38Upgrade python3-debuginfoUpgrade python3-toolsUpgrade pythonUpgrade python3-libsUpgrade python3-develUpgrade python3-tkinterUpgrade python38-toolsUpgrade python-debugUpgrade python-debuginfoUpgrade python38-develUpgrade python38-debug | Apr 19, 2024 | Mar 19, 2024 |
| Amazon_linux_2023 | — | Upgrade python3.9-debuginfoUpgrade python3.11-develUpgrade python3-debugUpgrade python3.11-debugsourceUpgrade python3-idleUpgrade python3Upgrade python3-tkinterUpgrade python3-develUpgrade python3.11-debugUpgrade python3.11-debuginfoUpgrade python-unversioned-commandUpgrade python3.9-debugsourceUpgrade python3.11-tkinterUpgrade python3.11Upgrade python3.11-idleUpgrade python3.11-libsUpgrade python3-testUpgrade python3-libsUpgrade python3.11-test | Feb 17, 2025 | Mar 19, 2024 |
| Debian | — | Upgrade python3.11Upgrade pypy3Upgrade python3.9 | Mar 26, 2024 | Mar 19, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade dev-python/pypy3_10.Upgrade dev-lang/python.Upgrade dev-python/pypy3_9.Upgrade dev-python/pypy3. | May 6, 2024 | Mar 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-unversioned-commandUpgrade python3-fgoUpgrade python3 | Nov 11, 2024 | Mar 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3Upgrade python3-unversioned-command | Jun 26, 2024 | Mar 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-unversioned-commandUpgrade python3-fgoUpgrade python3 | Jul 1, 2024 | Mar 19, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory10 | Jun 25, 2024 | Mar 19, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade python39-tomlUpgrade python39-debugUpgrade python39-plyUpgrade python39-testUpgrade python39-requestsUpgrade python3.11-develUpgrade python39Upgrade python39-setuptoolsUpgrade platform-python-develUpgrade python3.11Upgrade python3-idleUpgrade python39-idleUpgrade python39-wheelUpgrade python39-pipUpgrade python3.11-idleUpgrade python3.12-rpm-macrosUpgrade python39-PyMySQLUpgrade python39-libsUpgrade python39-develUpgrade python39-numpy-f2pyUpgrade platform-pythonUpgrade python3-develUpgrade python39-wheel-wheelUpgrade python3-libsUpgrade python39-rpm-macrosUpgrade python39-cffiUpgrade python39-pysocksUpgrade python39-psycopg2-testsUpgrade python39-numpy-docUpgrade python3.11-tkinterUpgrade python-unversioned-commandUpgrade platform-python-debugUpgrade python3-tkinterUpgrade python3.11-testUpgrade python3.12-debugUpgrade python3.11-debugUpgrade python3.12-libsUpgrade python39-tkinterUpgrade python39-urllib3Upgrade python3.11-rpm-macrosUpgrade python39-setuptools-wheelUpgrade python3Upgrade python39-psycopg2-docUpgrade python39-chardetUpgrade python39-pycparserUpgrade python3.12-develUpgrade python3.12Upgrade python39-scipyUpgrade python39-cryptographyUpgrade python3-testUpgrade python3.12-testUpgrade python39-psutilUpgrade python39-pip-wheelUpgrade python39-mod_wsgiUpgrade python3.12-tkinterUpgrade python3.12-idleUpgrade python39-numpyUpgrade python3.11-libsUpgrade python39-psycopg2Upgrade python39-pyyamlUpgrade python39-lxmlUpgrade python39-idnaUpgrade python3-debugUpgrade python39-six | May 30, 2024 | Mar 19, 2024 |
| Redhat_linux | — | Upgrade python3.11Upgrade python39-numpyUpgrade python39-scipy-debuginfoUpgrade python-cryptography-debugsourceUpgrade python3.12-develUpgrade python3.12-rpm-macrosUpgrade python39-lxmlUpgrade python3.9-debuginfoUpgrade python39-pyUpgrade Cython-debugsourceUpgrade python39-pyyamlUpgrade python39-idnaUpgrade python39-lxml-debuginfoUpgrade python39-numpy-f2pyUpgrade python39-testUpgrade python-lxml-debugsourceUpgrade python3-develUpgrade python39-numpy-docUpgrade python39-plyUpgrade platform-python-debugUpgrade python39-rpm-macrosUpgrade python39-Cython-debuginfoUpgrade python39-iniconfigUpgrade python39-wcwidthUpgrade python39-idleUpgrade python3.11-libsUpgrade python-unversioned-commandUpgrade python39-tkinterUpgrade python39-requestsUpgrade python39-PyMySQLUpgrade python39-pyparsingUpgrade python3-debugsourceUpgrade python39-cffi-debuginfoUpgrade python39-pluggyUpgrade python39-pycparserUpgrade platform-python-develUpgrade python39-packagingUpgrade python39-CythonUpgrade python39-libsUpgrade python3.11-tkinterUpgrade python3.9-debugsourceUpgrade python3.11-debuginfoUpgrade python3-tkinterUpgrade python3-libsUpgrade python39-more-itertoolsUpgrade python39-tomlUpgrade python39-debuginfoUpgrade python39-psycopg2-testsUpgrade python39-pybind11-develUpgrade python3-idleUpgrade python3.12-testUpgrade python39-sixUpgrade python3.12-debugsourceUpgrade python3-debuginfoUpgrade python3.11-testUpgrade python39-attrsUpgrade python39-pybind11Upgrade python39-develUpgrade python39-cryptography-debuginfoUpgrade python-psutil-debugsourceUpgrade python39-pipUpgrade python39-numpy-debuginfoUpgrade python39-cryptographyUpgrade python39-setuptoolsUpgrade python39-chardetUpgrade python3.11-debugsourceUpgrade python39-psycopg2-docUpgrade python3-testUpgrade python-cffi-debugsourceUpgrade python3.12-debuginfoUpgrade python3.12-tkinterUpgrade python3-debugUpgrade python39-debugUpgrade python3.12-libsUpgrade PyYAML-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python3.11-idleUpgrade python39-wheel-wheelUpgrade python39-scipyUpgrade python3.12-debugUpgrade python39-urllib3Upgrade python3.11-debugUpgrade python39-pyyaml-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python3.11-rpm-macrosNo solution existsUpgrade python39-psutil-debuginfoUpgrade python39-pysocksUpgrade python3.11-develUpgrade python39-wheelUpgrade scipy-debugsourceUpgrade python39-psutilUpgrade python3.12-idleUpgrade platform-pythonUpgrade python39-mod_wsgiUpgrade python39-cffiUpgrade python39-setuptools-wheelUpgrade python39-psycopg2Upgrade python39-debugsourceUpgrade python39-pytestUpgrade python3.12Upgrade numpy-debugsourceUpgrade python39-pip-wheelUpgrade python39Upgrade python3 | May 24, 2024 | Mar 19, 2024 |
| Rocky_linux | — | Upgrade python3.11-idleUpgrade python3-debugsourceUpgrade python39-scipy-debuginfoUpgrade python3Upgrade python39-testUpgrade python-psutil-debugsourceUpgrade python39-pyyamlUpgrade platform-pythonUpgrade python39-lxmlUpgrade python39-numpyUpgrade python39-numpy-debuginfoUpgrade python3.11-debugsourceUpgrade python3.12-debugUpgrade python3.12-testUpgrade python3.12-tkinterUpgrade python39-idleUpgrade python39-pybind11-develUpgrade python39-psycopg2-docUpgrade python-lxml-debugsourceUpgrade python3.12-libsUpgrade python39-psutil-debuginfoUpgrade Cython-debugsourceUpgrade python39-psycopg2-testsUpgrade python3.12-debugsourceUpgrade python39-cryptographyUpgrade python3-testUpgrade python39-numpy-f2pyUpgrade python3.12-idleUpgrade python39-debugsourceUpgrade python39-CythonUpgrade python39-lxml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python39-scipyUpgrade python3.11-libsUpgrade python39-pyyaml-debuginfoUpgrade python3.11-debuginfoUpgrade python3.12-develUpgrade python3.12Upgrade python3.11-debugUpgrade python39-psutilUpgrade python39-cffiUpgrade python3-debugUpgrade python39-develUpgrade python39-Cython-debuginfoUpgrade python3.11Upgrade python39-libsUpgrade python39-cryptography-debuginfoUpgrade python3.11-testUpgrade python39-pybind11Upgrade PyYAML-debugsourceUpgrade python39-mod_wsgiUpgrade python3-libsUpgrade python3-tkinterUpgrade python-cryptography-debugsourceUpgrade python-cffi-debugsourceUpgrade python39-debuginfoUpgrade python39-debugUpgrade python39Upgrade python3.11-develUpgrade python3-develUpgrade python3-debuginfoUpgrade numpy-debugsourceUpgrade scipy-debugsourceUpgrade python3.12-debuginfoUpgrade python3.11-tkinterUpgrade platform-python-develUpgrade python39-psycopg2-debuginfoUpgrade python39-psycopg2Upgrade python3-idleUpgrade platform-python-debugUpgrade python39-tkinterUpgrade python39-cffi-debuginfo | Jun 17, 2024 | Mar 19, 2024 |
| Suse | — | Upgrade python310-cursesUpgrade python311-dbmUpgrade python310-doc-devhelpUpgrade python311-doc-devhelpUpgrade python310-base-32bitUpgrade python311-testsuiteUpgrade python-tkUpgrade python311-32bitUpgrade python311-cursesUpgrade libpython3_10-1_0-32bitUpgrade python-doc-pdfUpgrade python-demoUpgrade python3-tkUpgrade python3Upgrade python39-docUpgrade python310-develUpgrade python310-testsuiteUpgrade python3-toolsUpgrade python39-doc-devhelpUpgrade libpython3_10-1_0Upgrade python39-tkUpgrade python310-docUpgrade libpython3_9-1_0Upgrade libpython2_7-1_0Upgrade libpython3_11-1_0-32bitUpgrade python3-docUpgrade python-baseUpgrade pythonUpgrade python39-base-32bitUpgrade python310-idleUpgrade python311-baseUpgrade python311Upgrade libpython3_11-1_0Upgrade python-base-32bitUpgrade python311-idleUpgrade python36Upgrade python36-baseUpgrade python3-testsuiteUpgrade python311-develUpgrade python39-baseUpgrade python311-tkUpgrade python-xmlUpgrade python3-dbmUpgrade python3-cursesUpgrade python39-develUpgrade python310-dbmUpgrade python39Upgrade libpython2_7-1_0-32bitUpgrade python39-toolsUpgrade python310-toolsUpgrade python-cursesUpgrade python3-idleUpgrade python39-testsuiteUpgrade python310-32bitUpgrade libpython3_4m1_0-32bitUpgrade python-idleUpgrade python311-base-32bitUpgrade python3-baseUpgrade python39-idleUpgrade python39-dbmUpgrade python310-baseUpgrade python3-doc-devhelpUpgrade python36-develUpgrade python-32bitUpgrade libpython3_6m1_0Upgrade python39-cursesUpgrade python310-tkUpgrade python-gdbmUpgrade libpython3_9-1_0-32bitUpgrade python3-develUpgrade python-develUpgrade libpython3_4m1_0Upgrade python311-docUpgrade libpython3_6m1_0-32bitUpgrade python310Upgrade python-docUpgrade python311-toolsUpgrade python39-32bit | Mar 28, 2024 | Mar 19, 2024 |
| Ubuntu | — | Upgrade python3.11 (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python3.8 (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade python3.11Upgrade python3.5 (Ubuntu Pro)Upgrade python3.11-minimal (Ubuntu Pro)Upgrade python3.12-minimalUpgrade python3.8-minimalUpgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.12Upgrade python3.11-minimalUpgrade python2.7 (Ubuntu Pro)Upgrade python3.10-minimalUpgrade python3.10 | Jul 12, 2024 | Mar 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub