Python: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 8.7
  CVE-2024-8088

  Infinite loop when iterating over zip archive entry names from zipfile.Path

  There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive (for example, methods of "zipfil…

  Python Software Foundation CPython tensorflow python3.8 Debian Ubuntu Azure Linux Alpine Wolfi
  Aug 22, 2024

Revision history

1. 2026-07-09 #32

   Neue Updates von IBM aufgenommen

2. 2025-11-09 #31

   Neue Updates von openSUSE aufgenommen

3. 2025-09-29 #30

   Neue Updates von Ubuntu aufgenommen

4. 2025-06-12 #29

   Neue Updates von Gentoo aufgenommen

5. 2025-06-04 #28

   Neue Updates von SUSE aufgenommen

6. 2025-06-03 #27

   Neue Updates von SUSE aufgenommen

7. 2024-12-01 #26

   Neue Updates von Debian aufgenommen

8. 2024-11-21 #25

   Neue Updates von Ubuntu aufgenommen

9. 2024-11-19 #24

   Neue Updates von Ubuntu aufgenommen

10. 2024-11-18 #23

    Neue Updates von SUSE und Oracle Linux aufgenommen

11. 2024-11-13 #22

    Neue Updates von Amazon aufgenommen

12. 2024-11-11 #21

    Neue Updates von Red Hat aufgenommen

13. 2024-11-05 #20

    Neue Updates von IBM aufgenommen

14. 2024-10-14 #19

    Neue Updates von Ubuntu aufgenommen

15. 2024-10-13 #18

    Neue Updates von NetApp aufgenommen

16. 2024-09-30 #17

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

17. 2024-09-25 #16

    Neue Updates von Oracle Linux aufgenommen

18. 2024-09-24 #15

    Neue Updates von SUSE aufgenommen

19. 2024-09-23 #14

    Neue Updates von Red Hat aufgenommen

20. 2024-09-22 #13

    Neue Updates von SUSE aufgenommen

21. 2024-09-18 #12

    Neue Updates von SUSE aufgenommen

22. 2024-09-16 #11

    Neue Updates von Ubuntu aufgenommen

23. 2024-09-11 #10

    Neue Updates von Fedora aufgenommen

24. 2024-09-10 #9

    Neue Updates von Fedora aufgenommen

25. 2024-09-09 #8

    Neue Updates von Fedora aufgenommen

References

• Red Hat Bugtracker #2307370 vom 2024-08-22
  https://bugzilla.redhat.com/show_bug.cgi?id=2307370
• SecList Advisory
  https://seclists.org/oss-sec/2024/q3/226
• SecList Advisory
  https://seclists.org/oss-sec/2024/q3/229
• cPython Pull Request 122906
  https://github.com/python/cpython/pull/122906
• Debian Security Advisory DSA-5759 vom 2024-08-27
  https://lists.debian.org/debian-security-announce/2024/msg00172.html
• Fedora Security Advisory FEDORA-2024-0CF8BAAC55 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-0cf8baac55
• Fedora Security Advisory FEDORA-2024-9A940FFE4C vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-9a940ffe4c
• Fedora Security Advisory FEDORA-2024-DC7F1D57E4 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-dc7f1d57e4
• Fedora Security Advisory FEDORA-2024-3D656DAFE1 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3d656dafe1
• Fedora Security Advisory FEDORA-2024-6140989AAF vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6140989aaf
• Fedora Security Advisory FEDORA-2024-7008B2FEDF vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7008b2fedf
• Fedora Security Advisory FEDORA-2024-F28BEC9F9C vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f28bec9f9c
• Fedora Security Advisory FEDORA-2024-EA70424921 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-ea70424921
• Fedora Security Advisory FEDORA-2024-8142ADB4A8 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-8142adb4a8
• Fedora Security Advisory FEDORA-2024-5361EFB19A vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-5361efb19a
• Fedora Security Advisory FEDORA-2024-E537311F91 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e537311f91
• Red Hat Security Advisory RHSA-2024:5962 vom 2024-08-29
  https://access.redhat.com/errata/RHSA-2024:5962
• Fedora Security Advisory FEDORA-2024-DAB2A69BE9 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-dab2a69be9
• Fedora Security Advisory FEDORA-2024-B673D8C70F vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-b673d8c70f
• Fedora Security Advisory FEDORA-2024-AFBA3B5902 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-afba3b5902
• Fedora Security Advisory FEDORA-2024-992047A33F vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-992047a33f
• Fedora Security Advisory FEDORA-2024-985017D277 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-985017d277
• Oracle Linux Security Advisory ELSA-2024-5962 vom 2024-08-30
  https://linux.oracle.com/errata/ELSA-2024-5962.html
• Oracle Linux Security Advisory ELSA-2024-6163 vom 2024-09-03
  https://linux.oracle.com/errata/ELSA-2024-6163.html
• Oracle Linux Security Advisory ELSA-2024-6146 vom 2024-09-03
  https://linux.oracle.com/errata/ELSA-2024-6146.html
• Oracle Linux Security Advisory ELSA-2024-6179 vom 2024-09-03
  https://linux.oracle.com/errata/ELSA-2024-6179.html
• Fedora Security Advisory FEDORA-2024-48FD84DA22 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-48fd84da22
• Fedora Security Advisory FEDORA-2024-EBF3FE7BC9 vom 2024-09-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-ebf3fe7bc9
• Fedora Security Advisory FEDORA-2024-E887A10DEE vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e887a10dee
• Fedora Security Advisory FEDORA-2024-F2FC325C40 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f2fc325c40
• Fedora Security Advisory FEDORA-2024-1D0CB3B43F vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1d0cb3b43f
• Fedora Security Advisory FEDORA-2024-F750328C3B vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f750328c3b
• Fedora Security Advisory FEDORA-2024-6DEF755315 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6def755315
• Fedora Security Advisory FEDORA-2024-39D459DD00 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-39d459dd00
• Fedora Security Advisory FEDORA-2024-2B163F9201 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2b163f9201
• Fedora Security Advisory FEDORA-2024-E453A209E9 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e453a209e9
• Fedora Security Advisory FEDORA-2024-7A069F48E4 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7a069f48e4
• Fedora Security Advisory FEDORA-2024-F7F36C20A2 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f7f36c20a2
• Fedora Security Advisory FEDORA-2024-F652468298 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f652468298
• Fedora Security Advisory FEDORA-2024-AE2925C3AE vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-ae2925c3ae
• Fedora Security Advisory FEDORA-2024-7DB9258D37 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7db9258d37
• Fedora Security Advisory FEDORA-2024-6DEDBC5CF9 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6dedbc5cf9
• Fedora Security Advisory FEDORA-2024-37D9C902DD vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-37d9c902dd
• Fedora Security Advisory FEDORA-2024-308628EBB8 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-308628ebb8
• Fedora Security Advisory FEDORA-2024-1E6D6F8452 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1e6d6f8452
• Ubuntu Security Notice USN-7015-1 vom 2024-09-16
  https://ubuntu.com/security/notices/USN-7015-1
• SUSE Security Update SUSE-SU-2024:3303-1 vom 2024-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019454.html
• SUSE Security Update SUSE-SU-2024:3357-1 vom 2024-09-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LIDNXNV744GNUVXIRCBTY2Q4CIZ3PIEN/
• Red Hat Security Advisory RHSA-2024:6962 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6962
• Red Hat Security Advisory RHSA-2024:6961 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6961
• SUSE Security Update SUSE-SU-2024:3411-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019505.html
• SUSE Security Update SUSE-SU-2024:3411-1 vom 2024-09-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QNXFOIXBCGZTXD6BKYGBL3VDWS6RK6AB/
• SUSE Security Update SUSE-SU-2024:3427-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019516.html
• SUSE Security Update SUSE-SU-2024:3418-1 vom 2024-09-24
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019511.html
• Oracle Linux Security Advisory ELSA-2024-6962 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6962.html
• Oracle Linux Security Advisory ELSA-2024-6961 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6961.html
• Rocky Linux Security Advisory RLSA-2024:6962 vom 2024-09-30
  https://errata.build.resf.org/RLSA-2024:6962
• Ubuntu Security Notice USN-7015-3 vom 2024-10-01
  https://ubuntu.com/security/notices/USN-7015-3
• NetApp Security Advisory NTAP-20241011-0010 vom 2024-10-11
  https://security.netapp.com/advisory/ntap-20241011-0010/
• Ubuntu Security Notice USN-7015-4 vom 2024-10-14
  https://ubuntu.com/security/notices/USN-7015-4
• IBM Security Bulletin 7174912 vom 2024-11-06
  https://www.ibm.com/support/pages/node/7174912
• Red Hat Security Advisory RHSA-2024:9192 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9192
• Red Hat Security Advisory RHSA-2024:9371 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9371
• Red Hat Security Advisory RHSA-2024:9190 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9190
• Amazon Linux Security Advisory ALASPYTHON3.8-2024-016 vom 2024-11-13
  https://alas.aws.amazon.com/AL2/ALASPYTHON3.8-2024-016.html
• SUSE Security Update SUSE-SU-2024:4029-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019825.html
• Oracle Linux Security Advisory ELSA-2024-9190 vom 2024-11-19
  https://linux.oracle.com/errata/ELSA-2024-9190.html
• SUSE Security Update SUSE-SU-202410:15283-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019828.html
• SUSE Security Update SUSE-SU-2024:4020-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019831.html
• SUSE Security Update SUSE-SU-2024:4026-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019826.html
• SUSE Security Update SUSE-SU-202410:15282-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019829.html
• SUSE Security Update SUSE-SU-2024:4021-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019830.html
• SUSE Security Update SUSE-SU-2024:4025-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019827.html
• Ubuntu Security Notice USN-7015-5 vom 2024-11-19
  https://ubuntu.com/security/notices/USN-7015-5
• Ubuntu Security Notice USN-7015-6 vom 2024-11-22
  https://ubuntu.com/security/notices/USN-7015-6
• Debian Security Advisory DLA-3980 vom 2024-12-02
  https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html
• SUSE Security Update SUSE-SU-2025:20294-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021036.html
• SUSE Security Update SUSE-SU-2025:20154-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021184.html
• SUSE Security Update SUSE-SU-2025:20374-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021414.html
• SUSE Security Update SUSE-SU-2025:20065-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021256.html