Path traversal in Python - CVE-2024-12718

Vulnerability identifier: #VU111969

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-12718

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to modify arbitrary files on the system.

The vulnerability exists due to input validation error in the tarfile module. A remote attacker can pass a specially crafted archive to the application and modify some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory.

Python
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
Gentoo Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Public Cloud Module
Basesystem Module
Development Tools Module
Python 3 Module
openSUSE Leap
openEuler
Ubuntu
Fedora
IBM Observability with Instana
Netcool Operations Insight
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Ansible Automation Platform
Red Hat Advanced Cluster Security for Kubernetes
IBM TXSeries for Multiplatforms
Guardium Data Security Center (GDSC)
IBM Security Verify Directory
IBM Edge Application Manager
Red Hat OpenShift Container Platform
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
dev-lang/python
python3-base-debuginfo-32bit
python3-devel
python3-base-debugsource
python3-curses-debuginfo
python3-base-debuginfo
libpython3_4m1_0
libpython3_4m1_0-debuginfo
python3
python3-curses
python3-debuginfo
python3-debugsource
python3-tk
python3-tk-debuginfo
python3-base
python3-devel-debuginfo
libpython3_4m1_0-32bit
libpython3_4m1_0-debuginfo-32bit
python3 (Red Hat package)
platform-python-debug
platform-python
python3-tkinter
python3-test
python3-libs
python3-idle
platform-python-devel
python3.6
python3-testsuite
libpython3_6m1_0-debuginfo
python3-doc-devhelp
python3-tools
libpython3_6m1_0-32bit-debuginfo
libpython3_6m1_0-32bit
libpython3_6m1_0-64bit-debuginfo
libpython3_6m1_0-64bit
python3-core-debugsource
python3-doc
python3-testsuite-debuginfo
libpython3_6m1_0
python3-dbm
python3-dbm-debuginfo
python3-debug
python3-help
python3-unversioned-command
python3.9 (Red Hat package)
python3.9
python39-doc
python39-dbm-debuginfo
python39-tk
libpython3_9-1_0-debuginfo
python39-tools
python39
python39-tk-debuginfo
python39-curses
python39-base
python39-dbm
python39-idle
libpython3_9-1_0
python39-testsuite
python39-testsuite-debuginfo
python39-debuginfo
python39-debugsource
python39-curses-debuginfo
python39-base-debuginfo
python39-base-64bit-debuginfo
libpython3_9-1_0-64bit-debuginfo
python39-64bit
libpython3_9-1_0-64bit
python39-64bit-debuginfo
python39-base-64bit
libpython3_9-1_0-32bit
python39-base-32bit-debuginfo
python39-base-32bit
python39-32bit-debuginfo
libpython3_9-1_0-32bit-debuginfo
python39-32bit
python39-core-debugsource
python39-devel
python39-doc-devhelp
python3.10
libpython3_10-1_0-32bit-debuginfo
python310-tk-debuginfo
python310-curses
python310-debuginfo
python310-core-debugsource
python310
python310-base-32bit-debuginfo
python310-32bit-debuginfo
python310-32bit
python310-testsuite
libpython3_10-1_0-32bit
python310-base-32bit
python310-base-64bit-debuginfo
python310-64bit
python310-64bit-debuginfo
python310-base-64bit
libpython3_10-1_0-64bit
libpython3_10-1_0-64bit-debuginfo
python310-idle
python310-devel
libpython3_10-1_0-debuginfo
python310-doc
libpython3_10-1_0
python310-base-debuginfo
python310-dbm-debuginfo
python310-tk
python310-doc-devhelp
python310-tools
python310-debugsource
python310-base
python310-testsuite-debuginfo
python310-curses-debuginfo
python310-dbm
python3.11 (Red Hat package)
python3.11
python3.11-rpm-macros
python3.11-tkinter
python3.11-test
python3.11-libs
python3.11-idle
python3.11-devel
python3.11-debug
python311-testsuite-debuginfo
python311-64bit-debuginfo
libpython3_11-1_0-debuginfo
python311-tk
python311-tk-debuginfo
python311-doc
python311-idle
python311-base-debuginfo
python311-doc-devhelp
python311-debugsource
python311-testsuite
python311-32bit-debuginfo
libpython3_11-1_0-32bit-debuginfo
python311-base-64bit-debuginfo
python311-dbm
libpython3_11-1_0-32bit
python311-base-32bit
python311-base-32bit-debuginfo
python311-32bit
python311-curses-debuginfo
python311-curses
python311-dbm-debuginfo
python311-devel
python311-tools
python311-debuginfo
libpython3_11-1_0
python311
libpython3_11-1_0-64bit-debuginfo
python311-base
python311-64bit
python311-core-debugsource
libpython3_11-1_0-64bit
python311-base-64bit
python3.12 (Red Hat package)
python3.12 (Ubuntu package)
python3.12
python312-64bit
python312-core-debugsource
python312-dbm
libpython3_12-1_0-32bit-debuginfo
python312-base-32bit-debuginfo
libpython3_12-1_0-32bit
python312-base-32bit
python312-32bit-debuginfo
python312-32bit
python312-testsuite
python312-base-64bit
python312-64bit-debuginfo
libpython3_12-1_0-64bit
libpython3_12-1_0-64bit-debuginfo
python312-base-64bit-debuginfo
python312-tools
python312-base-debuginfo
libpython3_12-1_0
python312-curses-debuginfo
python312
python312-debuginfo
python312-dbm-debuginfo
python312-idle
libpython3_12-1_0-debuginfo
python312-tk
python312-doc
python312-devel
python312-debugsource
python312-base
python312-doc-devhelp
python312-tk-debuginfo
python312-testsuite-debuginfo
python312-curses
IBM API Connect
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
Red Hat Ceph Storage
IBM CICS TX Advanced
IBM CICS TX Standard

Install updates from vendor's website.

Python - addressed in versions 3.9.23, 3.10.18, 3.11.13, 3.12.11, 3.13.4, 3.14.0
IBM Observability with Instana - update to 1.0.299
Netcool Operations Insight - update to 1.6.15
Guardium Data Security Center (GDSC) - update to 3.8.5
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3
IBM Qradar SIEM - update to 7.5.0 Update Pack 13
IBM Security Verify Directory - update to 10.0.4.0.1
IBM API Connect - update to 10.0.8.5
Red Hat OpenShift Serverless - update to 1
Ansible Automation Platform - update to 2.5
Multicluster Engine for Kubernetes - update to 2.6.8
dev-lang/python - update to 3.4.5
python3-base-debuginfo-32bit - update to 3.4.10-25.169.1
python3-devel - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.1
python3-base-debugsource - update to 3.4.10-25.169.1
python3-curses-debuginfo - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-base-debuginfo - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.1
libpython3_4m1_0 - update to 3.4.10-25.169.1
libpython3_4m1_0-debuginfo - update to 3.4.10-25.169.1
python3 - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-curses - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-debuginfo - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-debugsource - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-tk - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-tk-debuginfo - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.2
python3-base - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.1
python3-devel-debuginfo - addressed in versions 3.4.10-25.169.1, 3.6.15-150300.10.97.1
libpython3_4m1_0-32bit - update to 3.4.10-25.169.1
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.169.1
python3 (Red Hat package) - addressed in versions 3.6.8-47.el8_6.8, 3.6.8-51.el8_8.10, 3.6.8-70.el8_10
platform-python-debug - update to 3.6.8-70.0.1
platform-python - update to 3.6.8-70.0.1
python3-tkinter - update to 3.6.8-70.0.1
python3-test - update to 3.6.8-70.0.1
python3-libs - update to 3.6.8-70.0.1
python3-idle - update to 3.6.8-70.0.1
python3-devel - update to 3.6.8-70.0.1
platform-python-devel - update to 3.6.8-70.0.1
python3.6 - addressed in versions 3.6.15-47.fc41, 3.6.15-47.fc42
python3-testsuite - update to 3.6.15-150300.10.97.1
libpython3_6m1_0-debuginfo - update to 3.6.15-150300.10.97.1
python3-doc-devhelp - update to 3.6.15-150300.10.97.1
python3-tools - update to 3.6.15-150300.10.97.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.97.1
libpython3_6m1_0-32bit - update to 3.6.15-150300.10.97.1
libpython3_6m1_0-64bit-debuginfo - update to 3.6.15-150300.10.97.1
libpython3_6m1_0-64bit - update to 3.6.15-150300.10.97.1
python3-core-debugsource - update to 3.6.15-150300.10.97.1
python3-doc - update to 3.6.15-150300.10.97.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.97.1
libpython3_6m1_0 - update to 3.6.15-150300.10.97.1
python3-idle - update to 3.6.15-150300.10.97.2
python3-dbm - update to 3.6.15-150300.10.97.2
python3-dbm-debuginfo - update to 3.6.15-150300.10.97.2
python3-debugsource - addressed in versions 3.7.9-46, 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3-debuginfo - addressed in versions 3.7.9-46, 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3-debug - addressed in versions 3.7.9-46, 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3 - addressed in versions 3.7.9-46, 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3-devel - addressed in versions 3.7.9-46, 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3-help - addressed in versions 3.7.9-46, 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3-unversioned-command - addressed in versions 3.9.9-41, 3.9.9-45, 3.11.6-11, 3.11.6-13
python3.9 (Red Hat package) - addressed in versions 3.9.18-3.el9_4.8, 3.9.21-2.el9_6.1
python3.9 - addressed in versions 3.9.23-1.fc41, 3.9.23-1.fc42
python39-doc - update to 3.9.23-150300.4.75.1
python39-dbm-debuginfo - update to 3.9.23-150300.4.75.1
python39-tk - update to 3.9.23-150300.4.75.1
libpython3_9-1_0-debuginfo - update to 3.9.23-150300.4.75.1
python39-tools - update to 3.9.23-150300.4.75.1
python39 - update to 3.9.23-150300.4.75.1
python39-tk-debuginfo - update to 3.9.23-150300.4.75.1
python39-curses - update to 3.9.23-150300.4.75.1
python39-base - update to 3.9.23-150300.4.75.1
python39-dbm - update to 3.9.23-150300.4.75.1
python39-idle - update to 3.9.23-150300.4.75.1
libpython3_9-1_0 - update to 3.9.23-150300.4.75.1
python39-testsuite - update to 3.9.23-150300.4.75.1
python39-testsuite-debuginfo - update to 3.9.23-150300.4.75.1
python39-debuginfo - update to 3.9.23-150300.4.75.1
python39-debugsource - update to 3.9.23-150300.4.75.1
python39-curses-debuginfo - update to 3.9.23-150300.4.75.1
python39-base-debuginfo - update to 3.9.23-150300.4.75.1
python39-base-64bit-debuginfo - update to 3.9.23-150300.4.75.1
libpython3_9-1_0-64bit-debuginfo - update to 3.9.23-150300.4.75.1
python39-64bit - update to 3.9.23-150300.4.75.1
libpython3_9-1_0-64bit - update to 3.9.23-150300.4.75.1
python39-64bit-debuginfo - update to 3.9.23-150300.4.75.1
python39-base-64bit - update to 3.9.23-150300.4.75.1
libpython3_9-1_0-32bit - update to 3.9.23-150300.4.75.1
python39-base-32bit-debuginfo - update to 3.9.23-150300.4.75.1
python39-base-32bit - update to 3.9.23-150300.4.75.1
python39-32bit-debuginfo - update to 3.9.23-150300.4.75.1
libpython3_9-1_0-32bit-debuginfo - update to 3.9.23-150300.4.75.1
python39-32bit - update to 3.9.23-150300.4.75.1
python39-core-debugsource - update to 3.9.23-150300.4.75.1
python39-devel - update to 3.9.23-150300.4.75.1
python39-doc-devhelp - update to 3.9.23-150300.4.75.1
python3.10 - addressed in versions 3.10.18-1.fc41, 3.10.18-1.fc42
libpython3_10-1_0-32bit-debuginfo - update to 3.10.18-150400.4.82.1
python310-tk-debuginfo - update to 3.10.18-150400.4.82.1
python310-curses - update to 3.10.18-150400.4.82.1
python310-debuginfo - update to 3.10.18-150400.4.82.1
python310-core-debugsource - update to 3.10.18-150400.4.82.1
python310 - update to 3.10.18-150400.4.82.1
python310-base-32bit-debuginfo - update to 3.10.18-150400.4.82.1
python310-32bit-debuginfo - update to 3.10.18-150400.4.82.1
python310-32bit - update to 3.10.18-150400.4.82.1
python310-testsuite - update to 3.10.18-150400.4.82.1
libpython3_10-1_0-32bit - update to 3.10.18-150400.4.82.1
python310-base-32bit - update to 3.10.18-150400.4.82.1
python310-base-64bit-debuginfo - update to 3.10.18-150400.4.82.1
python310-64bit - update to 3.10.18-150400.4.82.1
python310-64bit-debuginfo - update to 3.10.18-150400.4.82.1
python310-base-64bit - update to 3.10.18-150400.4.82.1
libpython3_10-1_0-64bit - update to 3.10.18-150400.4.82.1
libpython3_10-1_0-64bit-debuginfo - update to 3.10.18-150400.4.82.1
python310-idle - update to 3.10.18-150400.4.82.1
python310-devel - update to 3.10.18-150400.4.82.1
libpython3_10-1_0-debuginfo - update to 3.10.18-150400.4.82.1
python310-doc - update to 3.10.18-150400.4.82.1
libpython3_10-1_0 - update to 3.10.18-150400.4.82.1
python310-base-debuginfo - update to 3.10.18-150400.4.82.1
python310-dbm-debuginfo - update to 3.10.18-150400.4.82.1
python310-tk - update to 3.10.18-150400.4.82.1
python310-doc-devhelp - update to 3.10.18-150400.4.82.1
python310-tools - update to 3.10.18-150400.4.82.1
python310-debugsource - update to 3.10.18-150400.4.82.1
python310-base - update to 3.10.18-150400.4.82.1
python310-testsuite-debuginfo - update to 3.10.18-150400.4.82.1
python310-curses-debuginfo - update to 3.10.18-150400.4.82.1
python310-dbm - update to 3.10.18-150400.4.82.1
python3-tkinter - addressed in versions 3.11.6-11, 3.11.6-13
python3.11 (Red Hat package) - addressed in versions 3.11.7-1.el9_4.8, 3.11.11-2.el9_6.1, 3.11.13-1.el8_10
python3.11 - addressed in versions 3.11.13-1.fc41, 3.11.13-1.fc42
python3.11-rpm-macros - update to 3.11.13-1.0.1
python3.11-tkinter - update to 3.11.13-1.0.1
python3.11-test - update to 3.11.13-1.0.1
python3.11-libs - update to 3.11.13-1.0.1
python3.11-idle - update to 3.11.13-1.0.1
python3.11-devel - update to 3.11.13-1.0.1
python3.11-debug - update to 3.11.13-1.0.1
python3.11 - update to 3.11.13-1.0.1
python311-testsuite-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-64bit-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-tk - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-tk-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-doc - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-idle - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-base-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-doc-devhelp - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-debugsource - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-testsuite - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-32bit-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
libpython3_11-1_0-32bit-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-base-64bit-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-dbm - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
libpython3_11-1_0-32bit - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-base-32bit - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-base-32bit-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-32bit - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-curses-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-curses - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-dbm-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-devel - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-tools - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
libpython3_11-1_0 - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311 - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
libpython3_11-1_0-64bit-debuginfo - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-base - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-64bit - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-core-debugsource - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
libpython3_11-1_0-64bit - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python311-base-64bit - addressed in versions 3.11.13-150400.9.60.1, 3.11.13-150600.3.30.1
python3.12 (Red Hat package) - addressed in versions 3.12.1-4.el9_4.6, 3.12.9-1.el9_6.1, 3.12.9-2.el10_0.2, 3.12.11-1.el8_10
python3.12 (Ubuntu package) - addressed in versions 3.12.3-1ubuntu0.7, 3.12.7-1ubuntu2.2, 3.13.0-1ubuntu0.3, 3.13.3-1ubuntu0.2
python3.12 - addressed in versions 3.12.11-1.fc41, 3.12.11-1.fc42
python312-64bit - update to 3.12.11-150600.3.30.1
python312-core-debugsource - update to 3.12.11-150600.3.30.1
python312-dbm - update to 3.12.11-150600.3.30.1
libpython3_12-1_0-32bit-debuginfo - update to 3.12.11-150600.3.30.1
python312-base-32bit-debuginfo - update to 3.12.11-150600.3.30.1
libpython3_12-1_0-32bit - update to 3.12.11-150600.3.30.1
python312-base-32bit - update to 3.12.11-150600.3.30.1
python312-32bit-debuginfo - update to 3.12.11-150600.3.30.1
python312-32bit - update to 3.12.11-150600.3.30.1
python312-testsuite - update to 3.12.11-150600.3.30.1
python312-base-64bit - update to 3.12.11-150600.3.30.1
python312-64bit-debuginfo - update to 3.12.11-150600.3.30.1
libpython3_12-1_0-64bit - update to 3.12.11-150600.3.30.1
libpython3_12-1_0-64bit-debuginfo - update to 3.12.11-150600.3.30.1
python312-base-64bit-debuginfo - update to 3.12.11-150600.3.30.1
python312-tools - update to 3.12.11-150600.3.30.1
python312-base-debuginfo - update to 3.12.11-150600.3.30.1
libpython3_12-1_0 - update to 3.12.11-150600.3.30.1
python312-curses-debuginfo - update to 3.12.11-150600.3.30.1
python312 - update to 3.12.11-150600.3.30.1
python312-debuginfo - update to 3.12.11-150600.3.30.1
python312-dbm-debuginfo - update to 3.12.11-150600.3.30.1
python312-idle - update to 3.12.11-150600.3.30.1
libpython3_12-1_0-debuginfo - update to 3.12.11-150600.3.30.1
python312-tk - update to 3.12.11-150600.3.30.1
python312-doc - update to 3.12.11-150600.3.30.1
python312-devel - update to 3.12.11-150600.3.30.1
python312-debugsource - update to 3.12.11-150600.3.30.1
python312-base - update to 3.12.11-150600.3.30.1
python312-doc-devhelp - update to 3.12.11-150600.3.30.1
python312-tk-debuginfo - update to 3.12.11-150600.3.30.1
python312-testsuite-debuginfo - update to 3.12.11-150600.3.30.1
python312-curses - update to 3.12.11-150600.3.30.1
Red Hat Advanced Cluster Security for Kubernetes - update to 4.7.5
Red Hat OpenShift Container Platform - addressed in versions 4.12.79, 4.14.54, 4.16.44, 4.16.45, 4.17.36, 4.18.20, 4.19.4
Red Hat Ceph Storage - update to 7.1
IBM TXSeries for Multiplatforms - update to 11.1.0.0 ifix9
IBM CICS TX Advanced - update to 11.1.0.0 ifix33
IBM CICS TX Standard - update to 11.1.0.0 ifix34

• https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
• https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da
• https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9
• https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e
• https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a
• https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01
• https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1
• https://github.com/python/cpython/issues/127987
• https://github.com/python/cpython/issues/135034
• https://github.com/python/cpython/pull/135037
• https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/

• Multiple vulnerabilities in Python
• Fedora 41 update for python3.10
• Fedora 42 update for python3.10
• Fedora 42 update for python3.9
• Fedora 41 update for python3.9
• Fedora 42 update for python3.11
• Fedora 41 update for python3.11
• Fedora 42 update for python3.12
• Fedora 41 update for python3.12
• Ubuntu update for python3.12
• Gentoo update for Python, PyPy
• SUSE update for python310
• SUSE update for python312
• SUSE update for python311
• SUSE update for python39
• SUSE update for python311
• Red Hat Enterprise Linux 9 update for python3.11
• Red Hat Enterprise Linux 8 update for python3.11
• Red Hat Enterprise Linux 9 update for python3.12
• Red Hat Enterprise Linux 8 update for python3.12
• Red Hat Enterprise Linux 8 update for python3
• Red Hat Enterprise Linux 9 update for python3.9
• Red Hat Enterprise Linux 9 update for python3.12
• Red Hat Enterprise Linux 10 update for python3.12
• Red Hat Enterprise Linux 9 update for python3.11
• Anolis OS update for python3
• Fedora 41 update for python3.6
• Fedora 42 update for python3.6
• Red Hat Enterprise Linux 9 update for python3.9
• Red Hat Enterprise Linux 8 update for python3
• Red Hat Enterprise Linux 8 update for python3
• openEuler 24.03 LTS SP1 update for python3
• openEuler 24.03 LTS update for python3
• openEuler 24.03 LTS SP2 update for python3
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.7
• Anolis OS update for python3.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in IBM Observability with Instana (Agent)
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Security Verify Directory
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in IBM TXSeries for Multiplatforms
• SUSE update for python3
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.6
• openEuler 22.03 LTS SP4 update for python3
• openEuler 22.03 LTS SP3 update for python3
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• Multiple vulnerabilities in IBM Edge Application Manager
• openEuler 20.03 LTS SP4 update for python3
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM API Connect
• Multiple vulnerabilities in IBM Guardium Data Security Center
• IBM Watson Speech Services Cartridge update for Python
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• SUSE update for python3
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages