The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected.
When iterating over names of entries in a zip archive (for example, methods of "zipfile.Path" like "namelist()", "iterdir()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-packagingUpgrade python3Upgrade python39-plyUpgrade python3-develUpgrade python39-chardetUpgrade python3.12-debugUpgrade python39-numpy-f2pyUpgrade python39-psycopg2-testsUpgrade python3-tkinterUpgrade python39-lxmlUpgrade python3-debugUpgrade python3.12-testUpgrade python39-pybind11-develUpgrade python39-tomlUpgrade python39Upgrade python39-scipyUpgrade python3.12-libsUpgrade python3-libsUpgrade python39-rpm-macrosUpgrade python39-wcwidthUpgrade python39-setuptools-wheelUpgrade python3.11-libsUpgrade python39-pyUpgrade python39-cffiUpgrade python39-pycparserUpgrade python39-pyyamlUpgrade python39-CythonUpgrade python3.11-idleUpgrade python39-pyparsingUpgrade python39-cryptographyUpgrade python39-idnaUpgrade python39-urllib3Upgrade python39-iniconfigUpgrade python3-idleUpgrade python39-idleUpgrade python39-setuptoolsUpgrade python39-numpyUpgrade python39-sixUpgrade python39-debugUpgrade python3.11-tkinterUpgrade python39-wheelUpgrade python39-wheel-wheelUpgrade python-unversioned-commandUpgrade python39-psycopg2-docUpgrade python39-develUpgrade python39-requestsUpgrade python3.11-testUpgrade python39-PyMySQLUpgrade python39-libsUpgrade python39-attrsUpgrade python39-testUpgrade python39-tkinterUpgrade python3.12-develUpgrade python39-numpy-docUpgrade python3.12-rpm-macrosUpgrade python3.11-rpm-macrosUpgrade python39-pipUpgrade python3.11-develUpgrade python39-pysocksUpgrade python39-more-itertoolsUpgrade python3-testUpgrade python39-psycopg2Upgrade python39-pluggyUpgrade python39-psutilUpgrade python39-mod_wsgiUpgrade python3.11-debugUpgrade python39-pytestUpgrade python3.12-idleUpgrade python3.11Upgrade python3.12 | Aug 30, 2024 | Aug 22, 2024 |
| Alpine Linux | — | Upgrade python3 | Oct 1, 2024 | Aug 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python38-tkinterUpgrade python38-toolsUpgrade python38-debugUpgrade python38-develUpgrade python38Upgrade python38-libsUpgrade python38-debuginfoUpgrade python38-test | Nov 14, 2024 | Aug 22, 2024 |
| Amazon_linux_2023 | — | Upgrade python3.9-debugsourceUpgrade python3-libsUpgrade python3-idleUpgrade python3.11-testUpgrade python3.9-debuginfoUpgrade python3.11-tkinterUpgrade python3Upgrade python3.11-libsUpgrade python-unversioned-commandUpgrade python3.11Upgrade python3.11-debuginfoUpgrade python3.11-develUpgrade python3-testUpgrade python3-debugUpgrade python3.11-idleUpgrade python3.11-debugUpgrade python3-develUpgrade python3.11-debugsourceUpgrade python3-tkinter | Feb 17, 2025 | Aug 22, 2024 |
| Debian | — | Upgrade python3.9Upgrade pypy3Upgrade python3.13Upgrade python3.11 | Aug 28, 2024 | Aug 22, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/pypy.Upgrade dev-lang/python. | Jun 13, 2025 | Aug 22, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3Upgrade python3-unversioned-command | Dec 12, 2024 | Aug 22, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3Upgrade python3-unversioned-commandUpgrade python3-fgo | Dec 12, 2024 | Aug 22, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory13 | Nov 6, 2024 | Aug 22, 2024 |
| Oracle_linux | — | Upgrade python39-wheel-wheelUpgrade python39-plyUpgrade python3Upgrade python39-psycopg2Upgrade python3-idleUpgrade python39-pip-wheelUpgrade python-unversioned-commandUpgrade python39-psutilUpgrade python3.11-develUpgrade python39-setuptoolsUpgrade python3-develUpgrade python39-develUpgrade python3-tkinterUpgrade python39-psycopg2-testsUpgrade python3.11-debugUpgrade python39-tomlUpgrade python3.12-tkinterUpgrade python3.12-libsUpgrade python39-PyMySQLUpgrade python39-tkinterUpgrade python3.11-rpm-macrosUpgrade python3.11Upgrade python3.12-rpm-macrosUpgrade python39-testUpgrade python39-numpyUpgrade python3.12-debugUpgrade python39-scipyUpgrade python3-testUpgrade python39-debugUpgrade python39-pysocksUpgrade python39-mod_wsgiUpgrade python39-rpm-macrosUpgrade python3.12-develUpgrade python3.11-testUpgrade python3.11-tkinterUpgrade python39-requestsUpgrade python39-wheelUpgrade python3.12-testUpgrade python39-urllib3Upgrade python39-cffiUpgrade python39-numpy-docUpgrade python39-cryptographyUpgrade python3.11-libsUpgrade python39-pyyamlUpgrade python39Upgrade python39-pipUpgrade python39-idleUpgrade python3.12-idleUpgrade python39-idnaUpgrade python39-pycparserUpgrade python39-lxmlUpgrade python3-libsUpgrade python39-libsUpgrade python39-chardetUpgrade python39-numpy-f2pyUpgrade python3.12Upgrade python3.11-idleUpgrade python3-debugUpgrade python39-setuptools-wheelUpgrade python39-psycopg2-docUpgrade python39-six | Oct 16, 2024 | Aug 22, 2024 |
| Redhat_linux | — | Upgrade python3.11Upgrade python3.9-debugsourceUpgrade python39-debugUpgrade python39-psycopg2Upgrade python39-tkinterUpgrade python3.12-debuginfoUpgrade python3-debugUpgrade python39-psutil-debuginfoUpgrade python39-pip-wheelUpgrade python39-scipy-debuginfoUpgrade python3.12-debugsourceUpgrade python-cffi-debugsourceUpgrade python39-psycopg2-debuginfoUpgrade python3-testUpgrade numpy-debugsourceUpgrade python3.11-debugUpgrade python3.11-testUpgrade python39-scipyUpgrade python39-setuptoolsUpgrade python39-numpy-docUpgrade python3.11-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python3.11-tkinterUpgrade python39-mod_wsgiUpgrade python39-cffiUpgrade python-psutil-debugsourceUpgrade python3.11-rpm-macrosUpgrade python3.12-idleUpgrade python39-debuginfoUpgrade python3.12Upgrade python3.12-rpm-macrosUpgrade python39-Cython-debuginfoUpgrade python39-psycopg2-docUpgrade python3Upgrade python3.11-develUpgrade python3.12-tkinterUpgrade python39-psutilUpgrade python39-lxml-debuginfoUpgrade python39-pytestUpgrade python39-attrsUpgrade python39-numpy-debuginfoUpgrade python39-pysocksUpgrade python39-wheel-wheelUpgrade python39-testUpgrade python39-pipUpgrade python3.11-libsUpgrade python3-libsUpgrade python39Upgrade python3.12-debugUpgrade python39-setuptools-wheelUpgrade python39-sixUpgrade python39-pybind11-develUpgrade python39-CythonUpgrade python3.11-idleUpgrade python-unversioned-commandUpgrade python39-cryptographyUpgrade python-lxml-debugsourceUpgrade python39-pyyamlUpgrade python39-idleUpgrade python3.11-debuginfoUpgrade python3-idleUpgrade python39-requestsUpgrade scipy-debugsourceUpgrade python39-tomlUpgrade python39-PyMySQLUpgrade python39-pluggyUpgrade python3.12-libsUpgrade python39-more-itertoolsUpgrade python39-chardetUpgrade python3.12-develUpgrade python3-tkinterUpgrade python39-urllib3Upgrade python3.12-testUpgrade python39-plyUpgrade python39-rpm-macrosUpgrade python39-psycopg2-testsUpgrade python-cryptography-debugsourceUpgrade python39-wcwidthUpgrade python39-pycparserUpgrade python39-iniconfigUpgrade python39-idnaUpgrade python39-numpy-f2pyUpgrade python39-wheelNo solution existsUpgrade python39-cryptography-debuginfoUpgrade Cython-debugsourceUpgrade python39-pyUpgrade python39-cffi-debuginfoUpgrade python39-lxmlUpgrade python39-debugsourceUpgrade python39-develUpgrade python39-pybind11Upgrade python-psycopg2-debugsourceUpgrade python39-packagingUpgrade python39-numpyUpgrade python39-pyparsingUpgrade python3.9-debuginfoUpgrade python39-libsUpgrade python3-devel | Sep 13, 2024 | Aug 22, 2024 |
| Rocky_linux | — | Upgrade python39-debugUpgrade python39-develUpgrade python3.11-testUpgrade python-cffi-debugsourceUpgrade python39-CythonUpgrade python39-psycopg2Upgrade python3.11Upgrade python3.12-tkinterUpgrade python3.11-tkinterUpgrade PyYAML-debugsourceUpgrade python3.12Upgrade python39-numpyUpgrade python3.12-develUpgrade numpy-debugsourceUpgrade python39-tkinterUpgrade python3.11-debugUpgrade python3.12-libsUpgrade python3.11-develUpgrade python39-mod_wsgiUpgrade python3.12-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python3.12-debugUpgrade python39-scipyUpgrade python3.12-debugsourceUpgrade python39-psutilUpgrade python39-pybind11Upgrade python-cryptography-debugsourceUpgrade python3.11-idleUpgrade python-psutil-debugsourceUpgrade python39-psycopg2-testsUpgrade python39-numpy-f2pyUpgrade python3.11-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-pyyamlUpgrade python39-libsUpgrade python39-psycopg2-docUpgrade python-psycopg2-debugsourceUpgrade python39-debuginfoUpgrade Cython-debugsourceUpgrade python3.11-debugsourceUpgrade python3.12-testUpgrade python39-cryptographyUpgrade python39-cffi-debuginfoUpgrade python39-pybind11-develUpgrade python39-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python39-cffiUpgrade python39-psutil-debuginfoUpgrade python39-numpy-debuginfoUpgrade python39-idleUpgrade python39-lxmlUpgrade python39-pyyaml-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-lxml-debuginfoUpgrade scipy-debugsourceUpgrade python39-testUpgrade python39-Cython-debuginfoUpgrade python39Upgrade python3.12-idleUpgrade python3.11-libs | Oct 2, 2024 | Aug 22, 2024 |
| Suse | — | Upgrade python312-toolsUpgrade python310Upgrade libpython3_13-1_0-x86-64-v3Upgrade python311-base-32bitUpgrade libpython3_9-1_0-32bitUpgrade python313-baseUpgrade python312-base-32bitUpgrade python312-idleUpgrade python313-cursesUpgrade libpython3_12-1_0Upgrade python311-baseUpgrade python311-testsuiteUpgrade python310-toolsUpgrade python310-idleUpgrade python311-cursesUpgrade python313-doc-devhelpUpgrade python310-base-32bitUpgrade python311-develUpgrade python311-idleUpgrade python310-docUpgrade python313-toolsUpgrade python39-testsuiteUpgrade python311-dbmUpgrade python39-32bitUpgrade python39-docUpgrade python310-cursesUpgrade libpython3_13-1_0Upgrade libpython3_11-1_0Upgrade python310-baseUpgrade python39-dbmUpgrade python39-doc-devhelpUpgrade python313-idleUpgrade libpython3_10-1_0-32bitUpgrade python310-doc-devhelpUpgrade python311-doc-devhelpUpgrade python39-base-32bitUpgrade python312-cursesUpgrade python313-base-x86-64-v3Upgrade python313-docUpgrade python310-tkUpgrade python39-idleUpgrade libpython3_11-1_0-32bitUpgrade python313-develUpgrade python310-testsuiteUpgrade python312-develUpgrade python312-32bitUpgrade python311Upgrade python310-develUpgrade python313Upgrade python312-docUpgrade python39Upgrade python313-tkUpgrade python312-tkUpgrade python311-toolsUpgrade python311-docUpgrade python39-baseUpgrade python312-baseUpgrade python312-doc-devhelpUpgrade python39-tkUpgrade python312Upgrade python310-dbmUpgrade python313-x86-64-v3Upgrade python313-dbmUpgrade python312-testsuiteUpgrade python311-tkUpgrade python39-toolsUpgrade python39-develUpgrade libpython3_12-1_0-32bitUpgrade python39-cursesUpgrade python312-dbmUpgrade libpython3_10-1_0Upgrade libpython3_9-1_0Upgrade python311-32bitUpgrade python310-32bit | Dec 31, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade python3.10Upgrade python3.12Upgrade python3.8-minimalUpgrade python3.8Upgrade python3.10-minimalUpgrade python3.12-minimal | Sep 17, 2024 | Aug 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub