Infinite loop in Python - CVE-2024-8088

Vulnerability identifier: #VU96596

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-8088

CWE-ID: CWE-835

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the the CPython "zipfile" module affecting "zipfile.Path". A remote attacker can consume all available system resources and cause denial of service conditions.

Python
Debian Linux
Gentoo Linux
Oracle Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Manager Server Module
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy Module
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Linux Micro
SUSE Enterprise Storage
IBM AIX
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Anolis OS
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Manager Client Tools for Debian
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
Ubuntu
Slackware Linux
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Public Cloud Module
SUSE Linux Enterprise Server 15 SP4 LTSS
Python 3 Module
Legacy Module
Basesystem Module
openSUSE Leap
openEuler
Fedora
SUSE Manager Client Tools for Ubuntu 20.04
SUSE Manager Client Tools for Ubuntu 22.04
Oracle Solaris
IBM Concert Software
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
APEX Cloud Platform for Microsoft Azure
Rapid Infrastructure Automation
Guardium Data Security Center (GDSC)
OpenManage Network Integration (OMNI)
IBM Virtualization Engine TS7700 3948-VED
IBM VIOS
python2.7 (Ubuntu package)
python2.7-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.5-minimal (Ubuntu package)
python39-wcwidth
python39-PyMySQL
python39-toml
python39-pluggy
python39-Cython
python39-wheel
python39-wheel-wheel
python39-iniconfig
python39-scipy
python39-pysocks
python39-py
python39-cffi
python39-six
python39-numpy-doc
python39-numpy-f2py
python39-numpy
python39-urllib3
python39-pyparsing
python39-pybind11-devel
python39-pybind11
python39-psycopg2-tests
python39-psycopg2-doc
python39-psycopg2
python39-idna
python39-pycparser
python39-requests
python39-chardet
python39-cryptography
dev-lang/python
python3.8-minimal (Ubuntu package)
python3.8 (Ubuntu package)
python3.8
python3-unversioned-command
python3-devel
python3-help
python3-debugsource
python3-debuginfo
python3-debug
python3
python3.9
python39-tkinter
python39-test
python39-rpm-macros
python39-libs
python39-idle
python39-devel
python39
python39-debug
python3.9 (Red Hat package)
python39-dbm-debuginfo
python39-doc-devhelp
python39-base-debuginfo
python39-dbm
libpython3_9-1_0-64bit-debuginfo
libpython3_9-1_0
python39-tk
python39-debugsource
python39-curses-debuginfo
python39-tools
python39-base
python39-core-debugsource
python39-64bit
python39-base-32bit
libpython3_9-1_0-debuginfo
python39-tk-debuginfo
python39-curses
python39-testsuite-debuginfo
python39-debuginfo
python39-testsuite
python39-doc
python39-32bit
libpython3_9-1_0-32bit-debuginfo
python39-base-32bit-debuginfo
libpython3_9-1_0-32bit
python39-32bit-debuginfo
python39-64bit-debuginfo
libpython3_9-1_0-64bit
python39-base-64bit
python39-base-64bit-debuginfo
python3.10-minimal (Ubuntu package)
python3.10 (Ubuntu package)
python3.10
python310-tk-debuginfo
python310-doc-devhelp
python310-devel
python310-curses-debuginfo
python310-curses
python310-core-debugsource
python310-dbm
libpython3_10-1_0
python310-dbm-debuginfo
python310-base-debuginfo
libpython3_10-1_0-debuginfo
python310-base
python310-idle
python310-testsuite
libpython3_10-1_0-32bit
python310-32bit
python310-base-32bit-debuginfo
python310-32bit-debuginfo
libpython3_10-1_0-32bit-debuginfo
python310-base-32bit
python310-64bit
python310-base-64bit
libpython3_10-1_0-64bit-debuginfo
python310-64bit-debuginfo
python310-base-64bit-debuginfo
libpython3_10-1_0-64bit
python310-testsuite-debuginfo
python310-doc
python310-tk
python310-tools
python310-debuginfo
python310-debugsource
python310
python3.11 (Debian package)
python3-tkinter
python3-idle
python3-libs
python3-test
python-unversioned-command
mingw-python3
python3.11
python3.11 (Red Hat package)
python39-ply
libpython3_11-1_0-64bit-debuginfo
python311-64bit-debuginfo
python311-base-64bit
python311-base-64bit-debuginfo
libpython3_11-1_0-64bit
python311-base-32bit-debuginfo
python311-debugsource
libpython3_11-1_0-debuginfo
python311-doc
python311-devel
python311-curses-debuginfo
python311-curses
python311-tools
python311-dbm-debuginfo
libpython3_11-1_0
python311-base-debuginfo
python311-tk-debuginfo
python311-dbm
python311-doc-devhelp
python311-idle
python311-64bit
python311-base-32bit
python311-32bit-debuginfo
libpython3_11-1_0-32bit-debuginfo
libpython3_11-1_0-32bit
python311-32bit
python311-testsuite-debuginfo
python311
python311-base
python311-core-debugsource
python311-debuginfo
python311-tk
python311-testsuite
python3.12-minimal (Ubuntu package)
python3.12 (Ubuntu package)
python3.12 (Red Hat package)
python3.12
python3-docs
libpython3_12-1_0-debuginfo
python312-base-64bit
python312-debuginfo
libpython3_12-1_0-64bit-debuginfo
python312-base-debuginfo
python312-doc-devhelp
python312-testsuite-debuginfo
python312-curses
libpython3_12-1_0-64bit
python312-64bit-debuginfo
python312-base-64bit-debuginfo
python312-debugsource
python312-32bit
python312-32bit-debuginfo
python312-core-debugsource
python312-tools
libpython3_12-1_0-32bit-debuginfo
python312-tk-debuginfo
python312-base-32bit
libpython3_12-1_0-32bit
python312-base-32bit-debuginfo
python312-devel
python312
python312-base
python312-dbm-debuginfo
python312-doc
python312-dbm
libpython3_12-1_0
python312-idle
python312-curses-debuginfo
python312-tk
python312-64bit
python312-testsuite
python3.13
python39-lxml
python39-mod_wsgi
python39-pyyaml
python39-psutil
python39-pytest
python39-more-itertools
python39-pip
python39-pip-wheel
python39-attrs
python39-packaging
python39-setuptools-wheel
python39-setuptools
venv-salt-minion
IBM Cloud Pak for Multicloud Management
Dell Enterprise SONiC Distribution
Dell EMC VxRail Appliance
Virtualization Engine TS7700 3957-VED

Install updates from vendor's website.

Python - addressed in versions 3.9.20, 3.10.15, 3.11.10, 3.12.6
IBM Concert Software - update to 1.0.5
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
Rapid Infrastructure Automation - update to 1.1.5.3
Guardium Data Security Center (GDSC) - update to 3.6.1
python2.7 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.7.12-1ubuntu0~16.04.18+esm18, 2.7.17-1~18.04ubuntu1.13+esm13, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4
python2.7-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4
python3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python39-wcwidth - update to 0.2.5-3
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python39-Cython - update to 0.29.21-5
python39-wheel - update to 0.35.1-4
python39-wheel-wheel - update to 0.35.1-4
python39-iniconfig - update to 1.1.1-2
python39-scipy - update to 1.5.4-5.0.1
python39-pysocks - update to 1.7.1-4
python39-py - update to 1.10.0-1
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python39-numpy-doc - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-numpy - update to 1.19.4-3.0.1
python39-urllib3 - update to 1.25.10-5
IBM Cloud Pak for Multicloud Management - update to 2.3 FP11
python39-pyparsing - update to 2.4.7-5
python39-pybind11-devel - update to 2.7.1-1
python39-pybind11 - update to 2.7.1-1
python39-psycopg2-tests - update to 2.8.6-3.0.1
python39-psycopg2-doc - update to 2.8.6-3.0.1
python39-psycopg2 - update to 2.8.6-3.0.1
python39-idna - update to 2.10-4
python39-pycparser - update to 2.20-3
python39-requests - update to 2.25.0-3
python39-chardet - update to 3.0.4-19
python39-cryptography - update to 3.3.1-3
dev-lang/python - update to 3.4.5
OpenManage Network Integration (OMNI) - update to 3.7
python3.8-minimal (Ubuntu package) - update to 3.8.10-0ubuntu1~20.04.12
python3.8 (Ubuntu package) - update to 3.8.10-0ubuntu1~20.04.12
python3.8 - addressed in versions 3.8.20-1.fc39, 3.8.20-1.fc40, 3.8.20-1.fc41
python3-unversioned-command - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3-devel - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3-help - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3-debugsource - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3-debuginfo - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3-debug - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3 - addressed in versions 3.9.9-30, 3.9.9-31, 3.9.9-35, 3.11.6-5
python3.9 - addressed in versions 3.9.19-6.fc39, 3.9.19-6.fc40, 3.9.19-6.fc41, 3.9.19-6.fc42, 3.9.20-1.fc39, 3.9.20-1.fc40, 3.9.20-1.fc41
python39-tkinter - update to 3.9.19-7.0.1
python39-test - update to 3.9.19-7.0.1
python39-rpm-macros - update to 3.9.19-7.0.1
python39-libs - update to 3.9.19-7.0.1
python39-idle - update to 3.9.19-7.0.1
python39-devel - update to 3.9.19-7.0.1
python39 - update to 3.9.19-7.0.1
python39-debug - update to 3.9.19-7.0.1
python3.9 (Red Hat package) - update to 3.9.19-8.el9
python3 - update to 3.9.20
python39-dbm-debuginfo - update to 3.9.20-150300.4.52.1
python39-doc-devhelp - update to 3.9.20-150300.4.52.1
python39-base-debuginfo - update to 3.9.20-150300.4.52.1
python39-dbm - update to 3.9.20-150300.4.52.1
libpython3_9-1_0-64bit-debuginfo - update to 3.9.20-150300.4.52.1
libpython3_9-1_0 - update to 3.9.20-150300.4.52.1
python39-tk - update to 3.9.20-150300.4.52.1
python39-debugsource - update to 3.9.20-150300.4.52.1
python39-curses-debuginfo - update to 3.9.20-150300.4.52.1
python39-tools - update to 3.9.20-150300.4.52.1
python39-base - update to 3.9.20-150300.4.52.1
python39-devel - update to 3.9.20-150300.4.52.1
python39-core-debugsource - update to 3.9.20-150300.4.52.1
python39-64bit - update to 3.9.20-150300.4.52.1
python39-base-32bit - update to 3.9.20-150300.4.52.1
libpython3_9-1_0-debuginfo - update to 3.9.20-150300.4.52.1
python39-tk-debuginfo - update to 3.9.20-150300.4.52.1
python39-curses - update to 3.9.20-150300.4.52.1
python39-testsuite-debuginfo - update to 3.9.20-150300.4.52.1
python39-debuginfo - update to 3.9.20-150300.4.52.1
python39-testsuite - update to 3.9.20-150300.4.52.1
python39 - update to 3.9.20-150300.4.52.1
python39-idle - update to 3.9.20-150300.4.52.1
python39-doc - update to 3.9.20-150300.4.52.1
python39-32bit - update to 3.9.20-150300.4.52.1
libpython3_9-1_0-32bit-debuginfo - update to 3.9.20-150300.4.52.1
python39-base-32bit-debuginfo - update to 3.9.20-150300.4.52.1
libpython3_9-1_0-32bit - update to 3.9.20-150300.4.52.1
python39-32bit-debuginfo - update to 3.9.20-150300.4.52.1
python39-64bit-debuginfo - update to 3.9.20-150300.4.52.1
libpython3_9-1_0-64bit - update to 3.9.20-150300.4.52.1
python39-base-64bit - update to 3.9.20-150300.4.52.1
python39-base-64bit-debuginfo - update to 3.9.20-150300.4.52.1
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.6
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.6
python3.10 - addressed in versions 3.10.15-1.fc39, 3.10.15-1.fc40, 3.10.15-1.fc41
python310-tk-debuginfo - update to 3.10.15-150400.4.57.1
python310-doc-devhelp - update to 3.10.15-150400.4.57.1
python310-devel - update to 3.10.15-150400.4.57.1
python310-curses-debuginfo - update to 3.10.15-150400.4.57.1
python310-curses - update to 3.10.15-150400.4.57.1
python310-core-debugsource - update to 3.10.15-150400.4.57.1
python310-dbm - update to 3.10.15-150400.4.57.1
libpython3_10-1_0 - update to 3.10.15-150400.4.57.1
python310-dbm-debuginfo - update to 3.10.15-150400.4.57.1
python310-base-debuginfo - update to 3.10.15-150400.4.57.1
libpython3_10-1_0-debuginfo - update to 3.10.15-150400.4.57.1
python310-base - update to 3.10.15-150400.4.57.1
python310-idle - update to 3.10.15-150400.4.57.1
python310-testsuite - update to 3.10.15-150400.4.57.1
libpython3_10-1_0-32bit - update to 3.10.15-150400.4.57.1
python310-32bit - update to 3.10.15-150400.4.57.1
python310-base-32bit-debuginfo - update to 3.10.15-150400.4.57.1
python310-32bit-debuginfo - update to 3.10.15-150400.4.57.1
libpython3_10-1_0-32bit-debuginfo - update to 3.10.15-150400.4.57.1
python310-base-32bit - update to 3.10.15-150400.4.57.1
python310-64bit - update to 3.10.15-150400.4.57.1
python310-base-64bit - update to 3.10.15-150400.4.57.1
libpython3_10-1_0-64bit-debuginfo - update to 3.10.15-150400.4.57.1
python310-64bit-debuginfo - update to 3.10.15-150400.4.57.1
python310-base-64bit-debuginfo - update to 3.10.15-150400.4.57.1
libpython3_10-1_0-64bit - update to 3.10.15-150400.4.57.1
python310-testsuite-debuginfo - update to 3.10.15-150400.4.57.1
python310-doc - update to 3.10.15-150400.4.57.1
python310-tk - update to 3.10.15-150400.4.57.1
python310-tools - update to 3.10.15-150400.4.57.1
python310-debuginfo - update to 3.10.15-150400.4.57.1
python310-debugsource - update to 3.10.15-150400.4.57.1
python310 - update to 3.10.15-150400.4.57.1
python3.11 (Debian package) - update to 3.11.2-6+deb12u3
python3-tkinter - update to 3.11.6-5
python3-debug - update to 3.11.6-9
python3 - update to 3.11.6-9
python3-devel - update to 3.11.6-9
python3-idle - update to 3.11.6-9
python3-libs - update to 3.11.6-9
python3-test - update to 3.11.6-9
python-unversioned-command - update to 3.11.6-9
python3-tkinter - update to 3.11.6-9
mingw-python3 - addressed in versions 3.11.9-2.fc39, 3.11.9-2.fc40, 3.11.9-2.fc41
python3.11 - addressed in versions 3.11.9-6.fc39, 3.11.9-6.fc40, 3.11.9-6.fc41, 3.11.9-6.fc42, 3.11.10-1.fc39, 3.11.10-1.fc40, 3.11.10-1.fc41
python3.11 (Red Hat package) - addressed in versions 3.11.9-7.el8_10, 3.11.9-7.el9
python39-ply - update to 3.11-10
libpython3_11-1_0-64bit-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-64bit-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-base-64bit - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-base-64bit-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
libpython3_11-1_0-64bit - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-base-32bit-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-debugsource - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-doc - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-devel - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-curses-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-curses - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-tools - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-dbm-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
libpython3_11-1_0 - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-base-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-tk-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-dbm - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-doc-devhelp - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-idle - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-64bit - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-base-32bit - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-32bit-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
libpython3_11-1_0-32bit-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
libpython3_11-1_0-32bit - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-32bit - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-testsuite-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311 - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-base - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-core-debugsource - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-debuginfo - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1, 3.11.12-slfo.1.1_1.1
python311-tk - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python311-testsuite - addressed in versions 3.11.10-150400.9.35.1, 3.11.10-150600.3.6.1
python3.12-minimal (Ubuntu package) - update to 3.12.3-1ubuntu0.2
python3.12 (Ubuntu package) - update to 3.12.3-1ubuntu0.2
python3.12 (Red Hat package) - addressed in versions 3.12.5-2.el8_10, 3.12.5-2.el9
python3.12 - addressed in versions 3.12.5-2.fc39, 3.12.5-2.fc40, 3.12.5-2.fc41, 3.12.5-2.fc42, 3.12.6-1.fc39, 3.12.6-1.fc40, 3.12.6-1.fc41
python3-docs - addressed in versions 3.12.6-1.fc39, 3.12.6-1.fc40, 3.13.0~rc2-1.fc41
libpython3_12-1_0-debuginfo - update to 3.12.6-150600.3.6.1
python312-base-64bit - update to 3.12.6-150600.3.6.1
python312-debuginfo - update to 3.12.6-150600.3.6.1
libpython3_12-1_0-64bit-debuginfo - update to 3.12.6-150600.3.6.1
python312-base-debuginfo - update to 3.12.6-150600.3.6.1
python312-doc-devhelp - update to 3.12.6-150600.3.6.1
python312-testsuite-debuginfo - update to 3.12.6-150600.3.6.1
python312-curses - update to 3.12.6-150600.3.6.1
libpython3_12-1_0-64bit - update to 3.12.6-150600.3.6.1
python312-64bit-debuginfo - update to 3.12.6-150600.3.6.1
python312-base-64bit-debuginfo - update to 3.12.6-150600.3.6.1
python312-debugsource - update to 3.12.6-150600.3.6.1
python312-32bit - update to 3.12.6-150600.3.6.1
python312-32bit-debuginfo - update to 3.12.6-150600.3.6.1
python312-core-debugsource - update to 3.12.6-150600.3.6.1
python312-tools - update to 3.12.6-150600.3.6.1
libpython3_12-1_0-32bit-debuginfo - update to 3.12.6-150600.3.6.1
python312-tk-debuginfo - update to 3.12.6-150600.3.6.1
python312-base-32bit - update to 3.12.6-150600.3.6.1
libpython3_12-1_0-32bit - update to 3.12.6-150600.3.6.1
python312-base-32bit-debuginfo - update to 3.12.6-150600.3.6.1
python312-devel - update to 3.12.6-150600.3.6.1
python312 - update to 3.12.6-150600.3.6.1
python312-base - update to 3.12.6-150600.3.6.1
python312-dbm-debuginfo - update to 3.12.6-150600.3.6.1
python312-doc - update to 3.12.6-150600.3.6.1
python312-dbm - update to 3.12.6-150600.3.6.1
libpython3_12-1_0 - update to 3.12.6-150600.3.6.1
python312-idle - update to 3.12.6-150600.3.6.1
python312-curses-debuginfo - update to 3.12.6-150600.3.6.1
python312-tk - update to 3.12.6-150600.3.6.1
python312-64bit - update to 3.12.6-150600.3.6.1
python312-testsuite - update to 3.12.6-150600.3.6.1
python3.13 - addressed in versions 3.13.0~rc1-3.fc39, 3.13.0~rc1-3.fc40, 3.13.0~rc1-3.fc41, 3.13.0~rc1-3.fc42, 3.13.0~rc2-1.fc39, 3.13.0~rc2-1.fc40, 3.13.0~rc2-1.fc41
Dell Enterprise SONiC Distribution - update to 4.4.2
python39-lxml - update to 4.6.5-1
python39-mod_wsgi - update to 4.7.1-7
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.8
App Connect Enterprise Certified Container - addressed in versions 5.0.22, 12.0.6, 12.6.0
python39-pyyaml - update to 5.4.1-1
python39-psutil - update to 5.8.0-4.0.1
python39-pytest - update to 6.0.2-2.0.1
Dell EMC VxRail Appliance - update to 8.0.311
python39-more-itertools - update to 8.5.0-2
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.54.2.17, 8.60.0.115
Virtualization Engine TS7700 3957-VED - addressed in versions 8.54.2.17, 8.60.0.115
Oracle Solaris - update to 11.4 SRU 77
python39-pip - update to 20.2.4-9
python39-pip-wheel - update to 20.2.4-9
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
python39-setuptools-wheel - update to 50.3.2-6
python39-setuptools - update to 50.3.2-6
venv-salt-minion - addressed in versions 3006.0-1.47.1, 3006.0-2.23.1, 3006.0-2.54.3, 3006.0-2.61.1, 3006.0-2.63.3, 3006.0-3.65.1, 3006.0-150000.3.67.1

• https://mail.python.org/archives/list/security-announce@python.org/thread/GNFCKVI4TCATKQLALJ5SN4L4CSPSMILU/
• https://github.com/python/cpython/pull/122906
• https://github.com/python/cpython/issues/122905
• https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e
• https://github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64
• https://github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea
• https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db
• https://github.com/advisories/GHSA-q98g-hxg3-268c

• Denial of service in CPython zipfile module
• Debian update for python3.11
• Fedora 42 update for python3.9
• Fedora 40 update for mingw-python3
• Fedora 39 update for mingw-python3
• Fedora 39 update for python3.9
• Fedora 40 update for python3.9
• Fedora 41 update for python3.9
• Fedora 42 update for python3.12
• Fedora 42 update for python3.11
• Fedora 42 update for python3.13
• Fedora 39 update for python3.12
• Fedora 40 update for python3.12
• Fedora 41 update for python3.12
• Fedora 39 update for python3.11
• Fedora 40 update for python3.11
• Fedora 41 update for python3.11
• Fedora 40 update for python3.13
• Fedora 41 update for python3.13
• Fedora 39 update for python3.13
• Fedora 41 update for mingw-python3
• Fedora 41 update for python3-docs, python3.13
• openEuler 22.03 LTS SP3 update for python3
• openEuler 22.03 LTS SP1 update for python3
• openEuler 24.03 LTS update for python3
• openEuler 22.03 LTS SP4 update for python3
• Slackware Linux update for python3
• Fedora 40 update for python3.13
• Fedora 39 update for python3.13
• Fedora 41 update for python3.10
• Fedora 40 update for python3.10
• Fedora 39 update for python3.10
• Fedora 41 update for python3.12
• Fedora 40 update for python3-docs, python3.12
• Fedora 39 update for python3-docs, python3.12
• Fedora 40 update for python3.11
• Fedora 41 update for python3.11
• Fedora 39 update for python3.11
• Fedora 41 update for python3.9
• Fedora 40 update for python3.9
• Fedora 39 update for python3.9
• Fedora 39 update for python3.8
• Fedora 41 update for python3.8
• Fedora 40 update for python3.8
• Ubuntu update for python3.10
• SUSE update for python312
• SUSE update for python310
• Red Hat Enterprise Linux 8 update for python3.12
• Red Hat Enterprise Linux 8 update for python3.11
• SUSE update for python39
• SUSE update for python311
• SUSE update for python311
• Ubuntu update for python2.7
• Ubuntu update for python2.7
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM AIX and IBM VIOS
• Red Hat Enterprise Linux 9 update for python3.11
• Red Hat Enterprise Linux 9 update for python3.12
• Red Hat Enterprise Linux 9 update for python3.9
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• SUSE update for SUSE Manager Salt Bundle
• Ubuntu update for python2.7
• Ubuntu update for python2.7
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Dell VxRail Appliance
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Oracle Solaris update for third-party components
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in IBM System Storage Virtualization Engine TS7700
• Multiple vulnerabilities in IBM Concert Software
• Anolis OS update for python39:3.9 module
• APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• Multiple vulnerabilities in IBM Rapid Infrastructure Automation
• Gentoo update for Python, PyPy
• SUSE update for python311
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• Anolis OS update for python3.11
• Ubuntu update for python2.7