Resource exhaustion in CPython - CVE-2024-0450

Vulnerability identifier: #VU87685

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-0450

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the zipfile module does not properly control consumption of internal resources when extracting files from a zip archive. A remote attacker can pass a specially crafted archive aka zip-bomb to the application, trigger resource exhaustion and perform a denial of service (DoS) attack.

CPython
Oracle Linux
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Micro
SUSE Enterprise Storage
IBM AIX
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension 12
Ubuntu
Slackware Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Public Cloud Module
Basesystem Module
Development Tools Module
Python 3 Module
openSUSE Leap
openEuler
Fedora
Voice Gateway
Service Interconnect
Oracle Communications Diameter Signaling Router
IBM Workload Scheduler
Oracle Communications Cloud Native Core Automated Test Suite
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core DBTier
Migration Toolkit for Runtimes
IBM Cloud Pak for Security
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
OpenShift Logging
IBM Cloud Pak for Business Automation
IBM VIOS
Oracle Enterprise Communications Broker
SmartFabric OS10
Business Automation Insights
UCC Edge
PowerStore X
OpenManage Network Integration (OMNI)
PowerStore T
Enterprise SONiC
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
watsonx Assistant Cartridge
IBM Virtualization Engine TS7700 3948-VED
EMC Cloud Tiering Appliance
Juniper Secure Analytics (JSA)
MySQL Workbench
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3.6 (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.7 (Ubuntu package)
python2.7 (Ubuntu package)
python2.7-minimal (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.8 (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.11 (Ubuntu package)
python39-wcwidth
python39-PyMySQL
python39-toml
python39-pluggy
python39-Cython
python39-wheel-wheel
python39-wheel
python39-iniconfig
python39-scipy
python39-pysocks
python39-py
python39-cffi
python39-six
python39-numpy-doc
python39-numpy
python39-numpy-f2py
python39-urllib3
python39-pyparsing
python39-pybind11
python39-pybind11-devel
python-devel
libpython2_7-1_0-32bit
python-32bit
python-doc-pdf
python-doc
python-idle
python-base-debuginfo
python-tk
python-base-32bit
python-base-debugsource
python-demo
python-curses-debuginfo
python-tk-debuginfo
python-gdbm
libpython2_7-1_0-debuginfo
python-base
python-debuginfo-32bit
libpython2_7-1_0-debuginfo-32bit
python-base-debuginfo-32bit
python-debuginfo
python-curses
python-xml-debuginfo
python-xml
python-gdbm-debuginfo
python-debugsource
python
libpython2_7-1_0
python39-psycopg2-tests
python39-psycopg2-doc
python39-psycopg2
python39-idna
python39-pycparser
python39-requests
python39-chardet
python39-cryptography
python3-base-debuginfo
python3-tk
libpython3_4m1_0
python3-curses
python3-devel
python3-dbm
python3-dbm-debuginfo
python3-devel-debuginfo
python3-tk-debuginfo
python3-curses-debuginfo
python3-base
python3
libpython3_4m1_0-debuginfo
python3-debuginfo
python3-base-debugsource
python3-debugsource
libpython3_4m1_0-debuginfo-32bit
libpython3_4m1_0-32bit
python3-base-debuginfo-32bit
python3 (Red Hat package)
platform-python-devel
platform-python-debug
platform-python
python3-idle
python3-libs
python3-test
python3-tkinter
python3.6
python36-base
python36-devel
libpython3_6m1_0-debuginfo
python36-debugsource
python36-base-debuginfo
python36-debuginfo
libpython3_6m1_0
python36
libpython3_6m1_0-debuginfo-32bit
libpython3_6m1_0-32bit
python3-tools
python3-core-debugsource
python3-doc
python3-testsuite
python3-doc-devhelp
python3-testsuite-debuginfo
libpython3_6m1_0-32bit-debuginfo
libpython3_6m1_0-64bit
libpython3_6m1_0-64bit-debuginfo
python3-debug
python3-unversioned-command
python3-help
python3.9
python3.9 (Red Hat package)
python39-devel
python39-test
python39-tkinter
python39
python39-rpm-macros
python39-libs
python39-idle
python39-debug
python3.10 (Ubuntu package)
python3.10-minimal (Ubuntu package)
python310-tk-debuginfo
python310-testsuite-debuginfo
python310-devel
python310-base-debuginfo
python310-doc-devhelp
python310-curses
python310-debuginfo
python310-curses-debuginfo
python310-dbm
python310-tk
python310-debugsource
python310-idle
libpython3_10-1_0-debuginfo
python310-tools
python310-doc
libpython3_10-1_0-32bit-debuginfo
libpython3_10-1_0-32bit
python310-32bit-debuginfo
python310-base
python310-32bit
python310-core-debugsource
python310
python310-base-32bit
python310-base-32bit-debuginfo
python310-dbm-debuginfo
python310-base-64bit
python310-base-64bit-debuginfo
python310-64bit-debuginfo
libpython3_10-1_0-64bit-debuginfo
python310-testsuite
python310-64bit
libpython3_10-1_0
libpython3_10-1_0-64bit
python3.11
python-unversioned-command
python3.11 (Red Hat package)
python311-tk-debuginfo
python311-doc-devhelp
python311-devel
python311-curses
python311-dbm-debuginfo
python311-base
python311-core-debugsource
python311-testsuite-debuginfo
python311-base-debuginfo
libpython3_11-1_0-debuginfo
python311-curses-debuginfo
libpython3_11-1_0
python311-debuginfo
python311-dbm
python311-tk
python311-idle
python311
python311-tools
python311-base-32bit
python311-doc
python311-testsuite
python311-debugsource
python311-32bit
libpython3_11-1_0-32bit
python311-base-32bit-debuginfo
libpython3_11-1_0-64bit
python311-32bit-debuginfo
libpython3_11-1_0-32bit-debuginfo
python311-64bit
python311-base-64bit-debuginfo
libpython3_11-1_0-64bit-debuginfo
python311-64bit-debuginfo
python311-base-64bit
python39-ply
python3.12-minimal (Ubuntu package)
python3.12 (Ubuntu package)
python3.12 (Red Hat package)
python39-lxml
python39-mod_wsgi
python39-pyyaml
python39-psutil
python39-pytest
dev-lang/python
dev-python/pypy3
python39-more-itertools
python39-pip-wheel
python39-pip
python39-attrs
python39-packaging
python39-setuptools-wheel
python39-setuptools
PeopleSoft Enterprise PeopleTools
Oracle Communications Session Border Controller
Juniper Junos Space
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Red Hat OpenShift GitOps
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
Dell Enterprise SONiC Distribution
IBM Qradar SIEM
Red Hat Ceph Storage
Red Hat Single Sign-On
Dell EMC VxRail Appliance
Virtualization Engine TS7700 3957-VED
PowerScale OneFS

Install updates from vendor's website.

CPython - addressed in versions 3.8.19, 3.9.19, 3.10.14
Voice Gateway - update to 1.0.8.12
Juniper Secure Analytics (JSA) - update to 7.5.0 UP9 IF02
MySQL Workbench - update to 8.0.38
IBM Workload Scheduler - addressed in versions 10.1.0.6, 10.2.5
SmartFabric OS10 - update to 10.5.4.11
Juniper Junos Space - update to 24.1R3
Business Automation Insights - update to 24.0.0.0.2
python3.6 (Ubuntu package) - update to Ubuntu Pro
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.7 (Ubuntu package) - update to Ubuntu Pro
python2.7 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python2.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - update to Ubuntu Pro
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python39-wcwidth - update to 0.2.5-3
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python39-Cython - update to 0.29.21-5
python39-wheel-wheel - update to 0.35.1-4
python39-wheel - update to 0.35.1-4
python39-iniconfig - update to 1.1.1-2
Migration Toolkit for Runtimes - update to 1.2.6
python39-scipy - update to 1.5.4-5.0.1
python39-pysocks - update to 1.7.1-4
Migration Toolkit for Containers - update to 1.8.4
python39-py - update to 1.10.0-1
IBM Cloud Pak for Security - update to 1.11.0.0
Red Hat OpenShift GitOps - addressed in versions 1.12.4, 1.12.5, 1.13.1
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python39-numpy-doc - update to 1.19.4-3.0.1
python39-numpy - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-urllib3 - update to 1.25.10-5
Red Hat OpenShift Serverless - update to 1.33.0
UCC Edge - update to 2.3.1
python39-pyparsing - update to 2.4.7-5
OpenShift Service Mesh - addressed in versions 2.4.8, 2.5.2
python39-pybind11 - update to 2.7.1-1
python39-pybind11-devel - update to 2.7.1-1
python-devel - update to 2.7.18-33.35.1
libpython2_7-1_0-32bit - update to 2.7.18-33.35.1
python-32bit - update to 2.7.18-33.35.1
python-doc-pdf - update to 2.7.18-33.35.1
python-doc - update to 2.7.18-33.35.1
python-idle - update to 2.7.18-33.35.1
python-base-debuginfo - update to 2.7.18-33.35.1
python-tk - update to 2.7.18-33.35.1
python-base-32bit - update to 2.7.18-33.35.1
python-base-debugsource - update to 2.7.18-33.35.1
python-demo - update to 2.7.18-33.35.1
python-curses-debuginfo - update to 2.7.18-33.35.1
python-tk-debuginfo - update to 2.7.18-33.35.1
python-gdbm - update to 2.7.18-33.35.1
libpython2_7-1_0-debuginfo - update to 2.7.18-33.35.1
python-base - update to 2.7.18-33.35.1
python-debuginfo-32bit - update to 2.7.18-33.35.1
libpython2_7-1_0-debuginfo-32bit - update to 2.7.18-33.35.1
python-base-debuginfo-32bit - update to 2.7.18-33.35.1
python-debuginfo - update to 2.7.18-33.35.1
python-curses - update to 2.7.18-33.35.1
python-xml-debuginfo - update to 2.7.18-33.35.1
python-xml - update to 2.7.18-33.35.1
python-gdbm-debuginfo - update to 2.7.18-33.35.1
python-debugsource - update to 2.7.18-33.35.1
python - update to 2.7.18-33.35.1
libpython2_7-1_0 - update to 2.7.18-33.35.1
python39-psycopg2-tests - update to 2.8.6-3.0.1
python39-psycopg2-doc - update to 2.8.6-3.0.1
python39-psycopg2 - update to 2.8.6-3.0.1
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.7, 2.10.4
python39-idna - update to 2.10-4
python39-pycparser - update to 2.20-3
python39-requests - update to 2.25.0-3
python39-chardet - update to 3.0.4-19
PowerStore X - update to 3.2.1.4-2386214
python39-cryptography - update to 3.3.1-3
python3-base-debuginfo - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-tk - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
libpython3_4m1_0 - update to 3.4.10-25.130.1
python3-curses - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-devel - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-dbm - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-dbm-debuginfo - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-devel-debuginfo - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-tk-debuginfo - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-curses-debuginfo - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-base - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3 - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
libpython3_4m1_0-debuginfo - update to 3.4.10-25.130.1
python3-debuginfo - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-base-debugsource - update to 3.4.10-25.130.1
python3-debugsource - addressed in versions 3.4.10-25.130.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.130.1
libpython3_4m1_0-32bit - update to 3.4.10-25.130.1
python3-base-debuginfo-32bit - update to 3.4.10-25.130.1
python3 (Red Hat package) - addressed in versions 3.6.8-47.el8_6.6, 3.6.8-51.el8_8.6, 3.6.8-62.el8_10
python3-devel - addressed in versions 3.6.8-62.0.1, 3.11.6-9
platform-python-devel - update to 3.6.8-62.0.1
platform-python-debug - update to 3.6.8-62.0.1
platform-python - update to 3.6.8-62.0.1
python3-idle - addressed in versions 3.6.8-62.0.1, 3.11.6-9
python3-libs - addressed in versions 3.6.8-62.0.1, 3.11.6-9
python3-test - addressed in versions 3.6.8-62.0.1, 3.11.6-9
python3-tkinter - addressed in versions 3.6.8-62.0.1, 3.11.6-9
python3.6 - addressed in versions 3.6.15-28.fc39, 3.6.15-30.fc40
python36-base - update to 3.6.15-55.1
python36-devel - update to 3.6.15-55.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-55.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python36-debugsource - update to 3.6.15-55.1
python36-base-debuginfo - update to 3.6.15-55.1
python36-debuginfo - update to 3.6.15-55.1
libpython3_6m1_0 - addressed in versions 3.6.15-55.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python36 - update to 3.6.15-55.1
libpython3_6m1_0-debuginfo-32bit - update to 3.6.15-55.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-55.1, 3.6.15-150300.10.65.1
python3-idle - addressed in versions 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-tools - addressed in versions 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-core-debugsource - addressed in versions 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-doc - update to 3.6.15-150300.10.65.1
python3-testsuite - update to 3.6.15-150300.10.65.1
python3-doc-devhelp - update to 3.6.15-150300.10.65.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-64bit - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-64bit-debuginfo - update to 3.6.15-150300.10.65.1
OpenManage Network Integration (OMNI) - update to 3.7
python3-debugsource - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3 - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3-debug - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3-debuginfo - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3-unversioned-command - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3-help - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3-devel - addressed in versions 3.9.9-31, 3.9.9-36, 3.11.6-6
python3.9 - update to 3.9.16-1
python3.9 (Red Hat package) - update to 3.9.18-3.el9_4.1
python3 - update to 3.9.19
python39-devel - update to 3.9.19-2.0.1
python39-test - update to 3.9.19-2.0.1
python39-tkinter - update to 3.9.19-2.0.1
python39 - update to 3.9.19-2.0.1
python39-rpm-macros - update to 3.9.19-2.0.1
python39-libs - update to 3.9.19-2.0.1
python39-idle - update to 3.9.19-2.0.1
python39-debug - update to 3.9.19-2.0.1
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.4
python310-tk-debuginfo - update to 3.10.14-150400.4.45.1
python310-testsuite-debuginfo - update to 3.10.14-150400.4.45.1
python310-devel - update to 3.10.14-150400.4.45.1
python310-base-debuginfo - update to 3.10.14-150400.4.45.1
python310-doc-devhelp - update to 3.10.14-150400.4.45.1
python310-curses - update to 3.10.14-150400.4.45.1
python310-debuginfo - update to 3.10.14-150400.4.45.1
python310-curses-debuginfo - update to 3.10.14-150400.4.45.1
python310-dbm - update to 3.10.14-150400.4.45.1
python310-tk - update to 3.10.14-150400.4.45.1
python310-debugsource - update to 3.10.14-150400.4.45.1
python310-idle - update to 3.10.14-150400.4.45.1
libpython3_10-1_0-debuginfo - update to 3.10.14-150400.4.45.1
python310-tools - update to 3.10.14-150400.4.45.1
python310-doc - update to 3.10.14-150400.4.45.1
libpython3_10-1_0-32bit-debuginfo - update to 3.10.14-150400.4.45.1
libpython3_10-1_0-32bit - update to 3.10.14-150400.4.45.1
python310-32bit-debuginfo - update to 3.10.14-150400.4.45.1
python310-base - update to 3.10.14-150400.4.45.1
python310-32bit - update to 3.10.14-150400.4.45.1
python310-core-debugsource - update to 3.10.14-150400.4.45.1
python310 - update to 3.10.14-150400.4.45.1
python310-base-32bit - update to 3.10.14-150400.4.45.1
python310-base-32bit-debuginfo - update to 3.10.14-150400.4.45.1
python310-dbm-debuginfo - update to 3.10.14-150400.4.45.1
python310-base-64bit - update to 3.10.14-150400.4.45.1
python310-base-64bit-debuginfo - update to 3.10.14-150400.4.45.1
python310-64bit-debuginfo - update to 3.10.14-150400.4.45.1
libpython3_10-1_0-64bit-debuginfo - update to 3.10.14-150400.4.45.1
python310-testsuite - update to 3.10.14-150400.4.45.1
python310-64bit - update to 3.10.14-150400.4.45.1
libpython3_10-1_0 - update to 3.10.14-150400.4.45.1
libpython3_10-1_0-64bit - update to 3.10.14-150400.4.45.1
python3.11 - update to 3.11.6-1
python3-tkinter - update to 3.11.6-6
python3 - update to 3.11.6-9
python3-debug - update to 3.11.6-9
python-unversioned-command - update to 3.11.6-9
python3.11 (Red Hat package) - addressed in versions 3.11.9-1.el8_10, 3.11.9-7.el9
python311-tk-debuginfo - update to 3.11.9-150400.9.26.1
python311-doc-devhelp - update to 3.11.9-150400.9.26.1
python311-devel - update to 3.11.9-150400.9.26.1
python311-curses - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-dbm-debuginfo - update to 3.11.9-150400.9.26.1
python311-base - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-core-debugsource - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-testsuite-debuginfo - update to 3.11.9-150400.9.26.1
python311-base-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-curses-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0 - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-dbm - update to 3.11.9-150400.9.26.1
python311-tk - update to 3.11.9-150400.9.26.1
python311-idle - update to 3.11.9-150400.9.26.1
python311 - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-tools - update to 3.11.9-150400.9.26.1
python311-base-32bit - update to 3.11.9-150400.9.26.1
python311-doc - update to 3.11.9-150400.9.26.1
python311-testsuite - update to 3.11.9-150400.9.26.1
python311-debugsource - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-32bit - update to 3.11.9-150400.9.26.1
libpython3_11-1_0-32bit - update to 3.11.9-150400.9.26.1
python311-base-32bit-debuginfo - update to 3.11.9-150400.9.26.1
libpython3_11-1_0-64bit - update to 3.11.9-150400.9.26.1
python311-32bit-debuginfo - update to 3.11.9-150400.9.26.1
libpython3_11-1_0-32bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-64bit - update to 3.11.9-150400.9.26.1
python311-base-64bit-debuginfo - update to 3.11.9-150400.9.26.1
libpython3_11-1_0-64bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-64bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-base-64bit - update to 3.11.9-150400.9.26.1
python39-ply - update to 3.11-10
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12 (Red Hat package) - update to 3.12.5-2.el9
PowerStore T - update to 4.0.0.2-2365061
Enterprise SONiC - update to 4.2.1
Dell Enterprise SONiC Distribution - update to 4.4.2
python39-lxml - update to 4.6.5-1
python39-mod_wsgi - update to 4.7.1-7
Red Hat OpenShift Container Platform - addressed in versions 4.12.61, 4.13.45, 4.14.32, 4.14.33
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.16.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
App Connect Enterprise Certified Container - addressed in versions 5.0.22, 12.0.6, 12.6.0
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
watsonx Assistant Cartridge - update to 5.1.1
Red Hat Ceph Storage - update to 5.3
python39-pyyaml - update to 5.4.1-1
python39-psutil - update to 5.8.0-4.0.1
OpenShift Logging - update to 5.8.9
python39-pytest - update to 6.0.2-2.0.1
dev-lang/python - update to 7.3.16
dev-python/pypy3 - update to 7.3.16
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
Red Hat Single Sign-On - update to 7.6.9
Dell EMC VxRail Appliance - update to 8.0.212
python39-more-itertools - update to 8.5.0-2
Virtualization Engine TS7700 3957-VED - addressed in versions 8.54.2.17, 8.60.0.115
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.54.2.17, 8.60.0.115
PowerScale OneFS - addressed in versions 9.4.0.19, 9.5.1.0, 9.5.1.1, 9.7.1.2, 9.9.0.0
EMC Cloud Tiering Appliance - update to 13.2.0.2.31
python39-pip-wheel - update to 20.2.4-9
python39-pip - update to 20.2.4-9
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF035, 24.0.0-IF001
python39-setuptools-wheel - update to 50.3.2-5
python39-setuptools - update to 50.3.2-5

• https://github.com/python/cpython/commit/66363b9a7b9fe7c99eba3a185b74c5fdbf842eba
• https://github.com/python/cpython/commit/fa181fcf2156f703347b03a3b1966ce47be8ab3b
• https://github.com/python/cpython/commit/a956e510f6336d5ae111ba429a61c3ade30a7549
• https://github.com/python/cpython/commit/30fe5d853b56138dbec62432d370a1f99409fc85
• https://github.com/python/cpython/commit/a2c59992e9e8d35baba9695eb186ad6c6ff85c51
• https://github.com/python/cpython/commit/d05bac0b74153beb541b88b4fca33bf053990183
• https://github.com/python/cpython/issues/109858
• https://www.bamsoftware.com/hacks/zipbomb/
• https://mail.python.org/archives/list/security-announce@python.org/thread/XELNUX2L3IOHBTFU7RQHCY6OUVEWZ2FG/

• Denial of service in CPython zipfile module
• Slackware Linux update for python3
• SUSE update for python310
• SUSE update for python311
• Fedora 40 update for python3.6
• Fedora 39 update for python3.6
• SUSE update for python3
• SUSE update for python3
• SUSE update for python
• SUSE update for python36
• Red Hat Enterprise Linux 8 update for python3
• Red Hat Enterprise Linux 8.8 Extended Update Support update for python3
• Red Hat Enterprise Linux 8 update for the python39:3.9 and python39-devel:3.9 modules
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in Red Hat OpenShift Serverless 1.33
• Red Hat Enterprise Linux 8 update for python3.11
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Red Hat Enterprise Linux 9 update for python3.9
• Gentoo update for Python, PyPy3
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Red Hat Ceph Storage 5
• Red Hat Enterprise Linux 8 update for python3
• Ubuntu update for python3.10
• Resource exhaustion in IBM AIX and IBM VIOS
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Oracle Communications Network Analytics Data Director
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Automated Test Suite
• Multiple vulnerabilities in MySQL Workbench
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Red Hat Service Interconnect 1.4
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in Dell SmartFabric OS10
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• SUSE update for python3
• Amazon Linux AMI update for python3.9
• Amazon Linux AMI update for python3.11
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• openEuler 22.03 LTS SP1 update for python3
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• openEuler 24.03 LTS update for python3
• openEuler 22.03 LTS SP3 update for python3
• openEuler 22.03 LTS SP4 update for python3
• Multiple vulnerabilities in Oracle Communications Cloud Native Core DBTier
• Multiple vulnerabilities in Oracle Communications Session Border Controller
• Multiple vulnerabilities in Oracle Enterprise Communications Broker
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Dell PowerStore X
• Red Hat Enterprise Linux 9 update for python3.11
• Red Hat Enterprise Linux 9 update for python3.12
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in Dell PowerStore T Family
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell PowerScale OneFS
• Ubuntu update for python2.7
• Multiple vulnerabilities in Oracle Communications Diameter Signaling Router
• Multiple vulnerabilities in IBM Business Automation Insights
• Multiple vulnerabilities in IBM System Storage Virtualization Engine TS7700
• Multiple vulnerabilities in IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
• Anolis OS update for python39:3.9 module
• Anolis OS update for python3
• Junos Space update for third-party components
• Multiple vulnerabilities in IBM Voice Gateway
• Dell UCC Edge update for third-party components
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• SUSE update for python311
• Anolis OS update for python3.11
• Multiple vulnerabilities in IBM Workload Scheduler