https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:11:56 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:3347 <p><strong>Affected:</strong> AlmaLinux:8: platform-python, AlmaLinux:8: platform-python-debug, AlmaLinux:8: platform-python-devel, AlmaLinux:8: python3-idle, AlmaLinux:8: python3-libs, AlmaLinux:8: python3-test, AlmaLinux:8: python3-tkinter</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: platform-python, AlmaLinux:8: platform-python-debug, AlmaLinux:8: platform-python-devel, AlmaLinux:8: python3-idle, AlmaLinux:8: python3-libs, AlmaLinux:8: python3-test, AlmaLinux:8: python3-tkinter</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597) * python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:3347 https://cve.radiocsirt.org/vuln/bdu:2024-04927 bdu:2024-04927 https://cve.radiocsirt.org/vuln/bdu:2024-04927 https://cve.radiocsirt.org/vuln/bit-libpython-2024-0450 <p><strong>Affected:</strong> Bitnami: libpython</p> <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.</p> <p>The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> <p><strong>Affected:</strong> Bitnami: libpython</p> <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.</p> <p>The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> https://cve.radiocsirt.org/vuln/bit-libpython-2024-0450 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/euvd-2026-258487 EUVD-2026-258487 https://cve.radiocsirt.org/vuln/euvd-2026-258487 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0450 <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.</p> <p>The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.</p> <p>The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0450 https://cve.radiocsirt.org/vuln/ghsa-jm46-725r-hh9v <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior.</p> <p>The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior.</p> <p>The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> https://cve.radiocsirt.org/vuln/ghsa-jm46-725r-hh9v https://cve.radiocsirt.org/vuln/gsd-2024-0450 gsd-2024-0450 https://cve.radiocsirt.org/vuln/gsd-2024-0450 https://cve.radiocsirt.org/vuln/msrc_cve-2024-0450 msrc_CVE-2024-0450 https://cve.radiocsirt.org/vuln/msrc_cve-2024-0450 https://cve.radiocsirt.org/vuln/oesa-2024-2141 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: python3</p> <p>Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es): An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive. (CVE-2024-0450)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: python3</p> <p>Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es): An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive. (CVE-2024-0450)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2141 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13790-1 <p>python38-3.8.19-1.1 on GA media</p> <p>python38-3.8.19-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13790-1 https://cve.radiocsirt.org/vuln/rhsa-2024:3391 <p>python: Path traversal on tempfile.TemporaryDirectory python: The zipfile module is vulnerable to zip-bombs leading to denial of service</p> <p>python: Path traversal on tempfile.TemporaryDirectory python: The zipfile module is vulnerable to zip-bombs leading to denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2024:3391 https://cve.radiocsirt.org/vuln/suse-su-2024:1009-1 <p>Security update for python39</p> <p>Security update for python39</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1009-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-0450 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:20.04:LTS: python3.8 and 5 more</p> <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:20.04:LTS: python3.8 and 5 more</p> <p>An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-0450 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0687 <p>Ein Angreifer kann mehrere Schwachstellen in Python ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Python ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0687