Уязвимость python3

There is a HIGH severity vulnerability affecting the CPython "zipfile" module. When iterating over names of entries in a zip archive (for example, methods of "zipfile.ZipFile" like "namelist()", "iterdir()", "extractall()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.

ELSA-2024-9371: python3.9 security update (MODERATE)

Уязвимость модуля zipfile интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

Security update for python

Security update for python3

Moderate: python3 security update

An issue was found in the CPython `zipfile` module affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.

ELSA-2024-4243: python3 security update (MODERATE)

Уязвимость модуля zipfile интерпретатора языка программирования Python (CPython), позволяющая нарушителю вызвать отказ в обслуживании

Security update for python3

Уязвимость python3

Important: python3.9 security update

Important: python3 security update

ELSA-2024-4078: python3.9 security update (IMPORTANT)

ELSA-2024-4058: python3.11 security update (IMPORTANT)

ELSA-2024-3347: python3 security update (IMPORTANT)

Security update for python311

Security update for python311

Security update for python39