There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected.
When iterating over names of entries in a zip archive (for example, methods of "zipfile.Path" like "namelist()", "iterdir()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-pytestUpgrade python-unversioned-commandUpgrade python3.12-tkinterUpgrade python39-PyMySQLUpgrade python39-sixUpgrade python39-pyyamlUpgrade python39-attrsUpgrade python39-pysocksUpgrade python3.12Upgrade python39-tkinterUpgrade python39-pybind11Upgrade python3.11-testUpgrade python39-psycopg2-docUpgrade python39-wheel-wheelUpgrade python39-develUpgrade python39-testUpgrade python39-pip-wheelUpgrade python3.11-rpm-macrosUpgrade python39-requestsUpgrade python3.11Upgrade python3.11-debugUpgrade python3.11-develUpgrade python39-pipUpgrade python3.12-rpm-macrosUpgrade python39-psycopg2Upgrade python39-libsUpgrade python39-psutilUpgrade python39-more-itertoolsUpgrade python39-pluggyUpgrade python3-testUpgrade python3.11-tkinterUpgrade python39-wheelUpgrade python39-mod_wsgiUpgrade python39-numpy-docUpgrade python3.12-develUpgrade python39-debugUpgrade python3.12-idleUpgrade python39-pycparserUpgrade python3.11-libsUpgrade python39-CythonUpgrade python39-plyUpgrade python3.12-testUpgrade python39-idnaUpgrade python3.12-debugUpgrade python39-iniconfigUpgrade python39-lxmlUpgrade python39-pybind11-develUpgrade python39-cryptographyUpgrade python3.12-libsUpgrade python39-psycopg2-testsUpgrade python3Upgrade python39-urllib3Upgrade python39-cffiUpgrade python39-packagingUpgrade python3-develUpgrade python39-wcwidthUpgrade python39-numpy-f2pyUpgrade python39-chardetUpgrade python39-rpm-macrosUpgrade python39-scipyUpgrade python3-libsUpgrade python39-setuptools-wheelUpgrade python3-debugUpgrade python39-py | Aug 30, 2024 | Aug 22, 2024 |
| Alpine Linux | — | Upgrade python3 | Oct 1, 2024 | Aug 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python38-debuginfoUpgrade python38-libsUpgrade python38-testUpgrade python38Upgrade python38-toolsUpgrade python38-develUpgrade python38-tkinterUpgrade python38-debug | Nov 14, 2024 | Aug 22, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-idleUpgrade python3-libsUpgrade python3.9-debugsourceUpgrade python3.11-tkinterUpgrade python3.11-testUpgrade python3.11-libsUpgrade python-unversioned-commandUpgrade python3.9-debuginfoUpgrade python3Upgrade python3.11Upgrade python3.11-debuginfoUpgrade python3-debugUpgrade python3-develUpgrade python3.11-develUpgrade python3.11-idleUpgrade python3-testUpgrade python3.11-debugsourceUpgrade python3.11-debugUpgrade python3-tkinter | Feb 17, 2025 | Aug 22, 2024 |
| Debian | — | Upgrade pypy3Upgrade python3.9Upgrade python3.13Upgrade python3.11 | Aug 28, 2024 | Aug 22, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/python.Upgrade dev-lang/pypy. | Jun 13, 2025 | Aug 22, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3Upgrade python3-unversioned-command | Dec 12, 2024 | Aug 22, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Dec 12, 2024 | Aug 22, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory13 | Nov 6, 2024 | Aug 22, 2024 |
| Oracle_linux | — | Upgrade python39-libsUpgrade python39-urllib3Upgrade python39-cffiUpgrade python39-wheelUpgrade python3.12-testUpgrade python39-chardetUpgrade python39-requestsUpgrade python39-idleUpgrade python39-idnaUpgrade python39-pyyamlUpgrade python39-lxmlUpgrade python3.12-idleUpgrade python39-pycparserUpgrade python39-sixUpgrade python3-debugUpgrade python39-numpy-f2pyUpgrade python39-numpy-docUpgrade python39-pipUpgrade python39-psycopg2-docUpgrade python39Upgrade python39-cryptographyUpgrade python3.11-idleUpgrade python3.12Upgrade python39-setuptools-wheelUpgrade python3.11-libsUpgrade python3-libsUpgrade python39-plyUpgrade python39-PyMySQLUpgrade python39-develUpgrade python39-psycopg2Upgrade python3.11-testUpgrade python39-scipyUpgrade python39-rpm-macrosUpgrade python39-mod_wsgiUpgrade python39-debugUpgrade python3-testUpgrade python3.11-tkinterUpgrade python39-tomlUpgrade python3.12-libsUpgrade python39-setuptoolsUpgrade python39-psutilUpgrade python3.11-debugUpgrade python3.12-develUpgrade python39-pysocksUpgrade python3Upgrade python39-tkinterUpgrade python39-testUpgrade python39-numpyUpgrade python3-idleUpgrade python3.12-debugUpgrade python3.12-rpm-macrosUpgrade python3.11Upgrade python3.11-rpm-macrosUpgrade python39-pip-wheelUpgrade python3-develUpgrade python3.11-develUpgrade python-unversioned-commandUpgrade python3.12-tkinterUpgrade python3-tkinterUpgrade python39-psycopg2-testsUpgrade python39-wheel-wheel | Oct 16, 2024 | Aug 22, 2024 |
| Redhat_linux | — | Upgrade python39-tomlUpgrade python39-urllib3Upgrade scipy-debugsourceUpgrade python39-PyMySQLUpgrade python3.9-debuginfoUpgrade python39-pyUpgrade python39-chardetUpgrade python39-sixUpgrade python3.12-develUpgrade python39Upgrade python39-CythonUpgrade python39-wheelUpgrade python39-plyUpgrade python3.12-testUpgrade python3-develUpgrade python39-numpy-f2pyUpgrade python39-setuptools-wheelUpgrade python39-rpm-macrosUpgrade python-unversioned-commandUpgrade python-psycopg2-debugsourceUpgrade python39-idnaUpgrade python39-psycopg2-testsUpgrade python-cryptography-debugsourceUpgrade python39-wcwidthUpgrade python3-tkinterUpgrade Cython-debugsourceUpgrade python3.12-debugUpgrade python39-pybind11Upgrade python39-more-itertoolsUpgrade python39-cffi-debuginfoUpgrade python39-pluggyUpgrade python39-cryptographyUpgrade python39-requestsUpgrade python3.12-libsUpgrade python39-develUpgrade python39-idleUpgrade python-lxml-debugsourceUpgrade python3.11-debuginfoUpgrade python3-idleUpgrade python3.11-idleNo solution existsUpgrade python3-libsUpgrade python39-numpyUpgrade python39-packagingUpgrade python39-lxmlUpgrade python3.11-libsUpgrade python39-pybind11-develUpgrade python39-debugsourceUpgrade python39-pyyamlUpgrade python39-cryptography-debuginfoUpgrade python39-pycparserUpgrade python39-pyparsingUpgrade python39-iniconfigUpgrade python39-libsUpgrade python39-cffiUpgrade python3.11Upgrade python3.12-idleUpgrade python3.12-rpm-macrosUpgrade python3.11-debugUpgrade python39-debuginfoUpgrade python3.11-develUpgrade python39-psycopg2-docUpgrade numpy-debugsourceUpgrade python39-psycopg2-debuginfoUpgrade python39-psutilUpgrade python3-testUpgrade python39-pyyaml-debuginfoUpgrade python3.12Upgrade python39-numpy-debuginfoUpgrade python3.12-debugsourceUpgrade python3.11-rpm-macrosUpgrade python39-pipUpgrade python39-debugUpgrade python3-debugUpgrade python39-tkinterUpgrade python39-Cython-debuginfoUpgrade python39-pip-wheelUpgrade python3Upgrade python39-numpy-docUpgrade python3.12-tkinterUpgrade PyYAML-debugsourceUpgrade python39-wheel-wheelUpgrade python-cffi-debugsourceUpgrade python3.11-tkinterUpgrade python3.11-debugsourceUpgrade python39-attrsUpgrade python39-pytestUpgrade python39-pysocksUpgrade python3.9-debugsourceUpgrade python39-psycopg2Upgrade python39-testUpgrade python39-scipy-debuginfoUpgrade python39-setuptoolsUpgrade python39-scipyUpgrade python39-lxml-debuginfoUpgrade python39-mod_wsgiUpgrade python3.12-debuginfoUpgrade python39-psutil-debuginfoUpgrade python-psutil-debugsourceUpgrade python3.11-test | Sep 13, 2024 | Aug 22, 2024 |
| Rocky_linux | — | Upgrade python39-cryptographyUpgrade python39-idleUpgrade python39-cffi-debuginfoUpgrade python39-numpy-debuginfoUpgrade python39-Cython-debuginfoUpgrade python3.12-idleUpgrade Cython-debugsourceUpgrade python39-psutil-debuginfoUpgrade python39-numpy-f2pyUpgrade python3.11-idleUpgrade python39-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-libsUpgrade python3.11-libsUpgrade python39-pyyamlUpgrade python-psycopg2-debugsourceUpgrade python-psutil-debugsourceUpgrade python3.11-debuginfoUpgrade python3.12-testUpgrade python39-pybind11-develUpgrade python39-lxmlUpgrade python39-debugsourceUpgrade python39-psycopg2-docUpgrade python39-cffiUpgrade python39-cryptography-debuginfoUpgrade python39-psycopg2-testsUpgrade python3.11-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-lxml-debuginfoUpgrade python39-testUpgrade scipy-debugsourceUpgrade python39Upgrade python-cffi-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-psutilUpgrade python39-develUpgrade python39-debugUpgrade python39-CythonUpgrade python3.12-tkinterUpgrade numpy-debugsourceUpgrade python39-psycopg2Upgrade python3.12Upgrade python3.11-tkinterUpgrade python3.12-libsUpgrade python3.12-debuginfoUpgrade python3.12-debugUpgrade python39-scipyUpgrade python3.11-debugUpgrade python3.12-debugsourceUpgrade python3.11-develUpgrade python39-tkinterUpgrade python39-psycopg2-debuginfoUpgrade python3.12-develUpgrade python39-mod_wsgiUpgrade python39-numpyUpgrade python39-pybind11Upgrade python-cryptography-debugsourceUpgrade python3.11Upgrade python3.11-test | Oct 2, 2024 | Aug 22, 2024 |
| Suse | — | Upgrade python313-develUpgrade python310-testsuiteUpgrade python313-baseUpgrade python313-doc-devhelpUpgrade python311-base-32bitUpgrade libpython3_12-1_0Upgrade python39-idleUpgrade libpython3_13-1_0-x86-64-v3Upgrade python310-doc-devhelpUpgrade python39-base-32bitUpgrade python310-idleUpgrade python311-cursesUpgrade python313-base-x86-64-v3Upgrade python312-idleUpgrade libpython3_11-1_0Upgrade libpython3_13-1_0Upgrade python310-baseUpgrade python39-32bitUpgrade python39-doc-devhelpUpgrade python310-cursesUpgrade libpython3_11-1_0-32bitUpgrade python313-docUpgrade python39-testsuiteUpgrade python312-cursesUpgrade python311-idleUpgrade python313-toolsUpgrade python310-docUpgrade python311-develUpgrade python311-doc-devhelpUpgrade python312-toolsUpgrade libpython3_10-1_0-32bitUpgrade python311-dbmUpgrade python313-idleUpgrade python313-cursesUpgrade python39-dbmUpgrade python312-base-32bitUpgrade libpython3_9-1_0-32bitUpgrade python310Upgrade python310-toolsUpgrade python310-base-32bitUpgrade python310-tkUpgrade python311-baseUpgrade python311-testsuiteUpgrade python39-docUpgrade python312-tkUpgrade python311-toolsUpgrade python311-docUpgrade python311Upgrade python312-dbmUpgrade libpython3_10-1_0Upgrade python39-cursesUpgrade python313-tkUpgrade python312-32bitUpgrade python312-develUpgrade python312-baseUpgrade python312-doc-devhelpUpgrade python310-32bitUpgrade python312-docUpgrade python310-develUpgrade python313Upgrade libpython3_12-1_0-32bitUpgrade python39-develUpgrade python312Upgrade python310-dbmUpgrade libpython3_9-1_0Upgrade python311-32bitUpgrade python39-toolsUpgrade python39-tkUpgrade python313-x86-64-v3Upgrade python313-dbmUpgrade python312-testsuiteUpgrade python311-tkUpgrade python39-baseUpgrade python39 | Dec 31, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade python3.8-minimalUpgrade python3.8Upgrade python3.10Upgrade python3.12Upgrade python3.12-minimalUpgrade python3.10-minimal | Sep 17, 2024 | Aug 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub