Skip to content
OpenAdvisories
Medium · 6.2 CVE-2024-5569 EUVD-2024-2374GHSA-jfmj-5v4g-7637PYSEC-2026-2074

Denial of Service via crafted zip file in jaraco/zipp

Published Jul 9, 2024 · Updated Oct 15, 2025 · Assigned by @huntr_ai

Vendor: jaraco Product: jaraco/zipp Package: checkov Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: py3-zipp Package: python-zipp Package: python-zipp Package: python-zipp Package: tensorflow Package: zipp Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu Ecosystem: Wolfi

Description

A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp.

Affected products

VendorProductAffectedFixed
jaraco jaraco/zipp unspecified – < 3.19.1 3.19.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 13 python-zipp 3.19.2-1 —
Debian 12 python-zipp 1.0.0-6+deb12u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS python-zipp 1.0.0-6ubuntu0.1 USN-6906-1
Ubuntu 22.04 LTS python-zipp 1.0.0-3ubuntu0.1 USN-6906-1
Ubuntu 20.04 LTS python-zipp 1.0.0-1ubuntu0.1 USN-6906-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Satellite Utils 6 foreman +1 3.12.0.1-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 ansible-collection-redhat-satellite 4.2.0-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 ansible-collection-redhat-satellite_operations 3.0.0-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 ansible-lint 5.4.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 ansible-runner +1 2.2.1-6.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 ansiblerole-foreman_scap_client 0.3.0-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 ansiblerole-insights-client 1.7.1-2.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 cjson 1.7.17-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 createrepo_c +3 1.1.3-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 dynflow-utils 1.6.3-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman +2 3.12.0.1-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman-bootloaders-redhat +1 202102220000-3.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman-discovery-image 1:4.1.0-61.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman-discovery-image-service +1 1.0.0-4.1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman-fapolicyd +1 1.0.1-3.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman-installer +1 1:3.12.0.1-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 foreman-proxy +1 3.12.0-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 katello +3 4.14.0-0.1.rc2.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 katello-certs-tools 2.10.0-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 katello-client-bootstrap 1.7.9-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 libcomps +2 0.1.21-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 libsolv +1 1:0.7.20-6.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 mosquitto 2.0.19-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 pulpcore-obsolete-packages 1.2.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 pulpcore-selinux 2.0.1-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 puppet-agent 8.8.1-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 puppet-agent-oauth 0.5.10-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 puppet-foreman_scap_client 1.0.0-2.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 puppetlabs-stdlib 9.4.1-1.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 puppetserver 8.6.2-2.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 python-aiodns +1 3.0.0-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-aiofiles +1 22.1.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-aiohttp +1 3.9.4-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-aiohttp-xmlrpc +1 1.5.0-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-aioredis +1 2.0.1-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-aiosignal +1 1.3.1-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-ansible-builder +1 3.0.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-asgiref +1 3.6.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-async-lru +1 1.0.3-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-async-timeout +1 4.0.2-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-asyncio-throttle +1 1.0.2-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-attrs +1 21.4.0-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-backoff +1 2.2.1-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-bindep +1 2.11.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-bleach +1 3.3.1-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-bleach-allowlist +1 1.0.3-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-bracex +1 2.2.1-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-brotli +1 1.0.9-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-certifi +1 2022.12.7-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-cffi +1 1.15.1-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-chardet +1 5.0.0-2.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-charset-normalizer +1 2.1.1-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-click +1 8.1.3-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-click-shell +1 2.1-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-colorama +1 0.4.4-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-commonmark +1 0.9.1-9.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-contextlib2 +1 21.6.0-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-cryptography +1 42.0.8-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-daemon +1 2.3.1-3.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 python-dataclasses +1 0.8-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-dateutil +1 2.8.2-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-debian +1 0.1.44-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-defusedxml +1 0.7.1-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-deprecated +1 1.2.13-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-diff-match-patch +1 20200713-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-distro +1 1.7.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-django +1 4.2.16-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-django-filter +1 23.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-django-guid +1 3.3.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-django-lifecycle +1 1.0.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-django-readonly-field +1 1.1.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-djangorestframework +1 3.14.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-djangorestframework-queryfields +1 1.0.0-8.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-docutils +1 0.20.1-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-drf-access-policy +1 1.3.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-drf-nested-routers +1 0.93.4-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-drf-spectacular +1 0.26.5-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-dynaconf +1 3.1.12-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-ecdsa +1 0.18.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-enrich +1 1.2.6-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-et-xmlfile +1 1.1.0-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-flake8 +1 5.0.0-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-frozenlist +1 1.3.3-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-future +1 0.18.3-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-galaxy-importer +1 0.4.19-2.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-gitdb +1 4.0.10-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-gitpython +1 3.1.40-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-gnupg +1 0.5.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-googleapis-common-protos +1 1.59.1-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-grpcio +1 1.65.4-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-gunicorn +1 22.0.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-importlib-metadata +1 6.0.1-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-inflection +2 0.5.1-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-iniparse +1 0.4-39.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-jinja2 +1 3.1.4-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-jq +1 1.6.0-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-json-stream +1 2.3.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-json-stream-rs-tokenizer +1 0.4.25-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-jsonschema +1 4.10.3-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-lockfile +1 0.12.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-lxml +1 4.9.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-markdown +1 3.4.1-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-markuppy +1 1.14-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-markupsafe +1 2.1.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-mccabe +1 0.7.0-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-multidict +1 6.0.4-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-odfpy +1 1.4.1-9.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-openpyxl +3 3.1.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_api +2 1.19.0-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_distro +2 0.40b0-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_exporter_otlp_proto_grpc +1 1.19.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_instrumentation 0.40b0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_instrumentation_wsgi +1 0.40b0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_sdk +3 1.19.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-opentelemetry_util_http +1 0.40b0-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-packaging 21.3-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-parsley 1.3-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pbr 5.8.0-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pexpect 4.8.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pillow 10.3.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-productmd 1.33-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-protobuf 4.21.6-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-psycopg 3.1.9-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-ptyprocess 0.7.0-2.el8sat RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp-ansible 1:0.21.8-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp-cli +1 0.27.2-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp-container 2.20.2-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp-deb 3.2.1-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp-file 1.15.1-2.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp-rpm 3.26.1-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulp_manifest 3.0.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pulpcore 3.49.19-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pyOpenSSL 24.1.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pycares 4.1.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pycodestyle 2.9.1-2.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pycparser 2.21-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pycryptodomex 3.20.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pyflakes 2.5.0-2.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pygments 2.17.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pyjwkest 1.4.2-8.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pyjwt +1 2.5.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pyparsing 3.1.1-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pyrsistent 0.18.1-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-pytz 2022.2.1-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-redis 4.3.4-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-requests 2.31.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-requirements-parser 0.2.0-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-rhsm 1.19.2-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-rich 13.3.1-7.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-ruamel-yaml 0.17.21-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-ruamel-yaml-clib 0.2.7-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-schema 0.7.5-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-semantic-version 2.10.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-six 1.16.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-smmap 5.0.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-solv 0.7.28-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-sqlparse 0.5.0-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-tablib 3.3.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-tenacity 7.0.0-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-toml 0.10.2-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-types-cryptography 3.3.23.2-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-typing-extensions 4.7.1-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-uritemplate 4.1.1-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-url-normalize 1.4.3-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-urllib3 2.2.3-1.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-urlman 2.0.1-3.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-uuid6 2023.5.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-wcmatch 8.3-5.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-whitenoise 6.0.0-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-wrapt 1.14.1-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-xlrd 2.0.1-8.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-xlwt 1.3.0-6.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-yarl 1.8.2-4.el8pc RHSA-2024:8906
Red Hat Satellite Capsule 6 python-zipp +1 3.20.2-1.el8pc RHSA-2024:8906
Red Hat Satellite 6 foreman +14 3.12.0.1-1.el8sat RHSA-2024:8906
Red Hat Satellite 6 foreman-installer +1 1:3.12.0.1-1.el8sat RHSA-2024:8906
Red Hat Satellite 6 mosquitto 2.0.19-1.el8sat RHSA-2024:8906
Red Hat Satellite 6 python-grpcio +1 1.65.4-1.el8pc RHSA-2024:8906
Red Hat Satellite 6 python-zipp +1 3.20.2-1.el8pc RHSA-2024:8906
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Openshift Ironic 4 python-zipp +1 3.19.1-1.el9 RHSA-2024:8418, RHSA-2024:8232
Red Hat OpenStack 17 python-zipp +1 3.4.0-3.el9ost RHSA-2024:9977
Red Hat OpenShift 4 containernetworking-plugins 1:1.4.0-4.rhaos4.17.el8 RHSA-2024:8232
Red Hat OpenShift 4 cri-o 1.29.9-6.rhaos4.16.gite7bd45a.el8 RHSA-2024:8418
Red Hat OpenShift 4 podman +6 4:5.2.3-2.rhaos4.17.el8 RHSA-2024:8232
Red Hat OpenShift 4 skopeo +1 2:1.16.0-3.rhaos4.17.el8 RHSA-2024:8232
Red Hat Ansible Automation Platform Inside 2 python-zipp +1 3.19.2-1.el9ap RHSA-2024:6428
Red Hat Ansible Automation Platform Inside 2 python39-zipp 3.19.2-1.el8ap RHSA-2024:6428
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.5.10-1.el8ap RHSA-2024:6428
Red Hat Ansible Automation Platform Developer 2 python-zipp +1 3.19.2-1.el9ap RHSA-2024:6428
Red Hat Ansible Automation Platform Developer 2 python39-zipp 3.19.2-1.el8ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 automation-controller +4 4.5.10-1.el8ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 python-django +1 4.2.15-1.el9ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 python-grpcio +1 1.58.3-1.el9ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 python-zipp +1 3.19.2-1.el9ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 python39-django +1 4.2.15-1.el8ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 python39-grpcio +1 1.58.3-1.el8ap RHSA-2024:6428
Red Hat Ansible Automation Platform 2 python39-zipp 3.19.2-1.el8ap RHSA-2024:6428

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 python-zipp 3.15.0-150400.10.10.1 SUSE-SU-2024:2400-1
SLES 3 python-zipp 3.15.0-150400.10.10.1 SUSE-SU-2024:2400-1, SUSE-SU-2024:2397-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Manager Server Module 4.3 venv-salt-minion 3006.0-150000.3.67.1 SUSE-SU-2024:4021-1
SUSE Manager Proxy Module 4.3 venv-salt-minion 3006.0-150000.3.67.1 SUSE-SU-2024:4021-1
SUSE Manager Client Tools for SLE Micro 5 venv-salt-minion 3006.0-150000.3.67.1 SUSE-SU-2024:4021-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 venv-salt-minion 3006.0-1.47.1 SUSE-SU-2024:4029-1, SUSE-EL-9-CLIENT-TOOLS-2024-4029
SUSE Manager Client Tools 15 venv-salt-minion 3006.0-150000.3.67.1 SUSE-SU-2024:4021-1
SUSE Manager Client Tools 12 venv-salt-minion 3006.0-3.65.1 SUSE-SU-2024:4020-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy +1 3.11.9-1.26.1 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-cryptography 3.3.2-1.18.1 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-docker 7.0.0-1.8.1 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-idna 3.4-1.9.2 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-passlib +1 1.7.4-1.3.1 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-setuptools 67.7.2-1.12.1 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-urllib3 2.0.7-1.12.1 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update saltbundlepy-zipp 3.15.0-1.9.2 SUSE-SU-2024:4029-1
SUSE EL-9:Update:Products:SaltBundle:Update venv-salt-minion 3006.0-1.47.1 SUSE-SU-2024:4029-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-zipp 3.19.2-2.1 openSUSE-SU-2026:12048-1, openSUSE-SU-2024:14167-1
openSUSE Leap 15.6 python-zipp 3.15.0-150400.10.10.1 SUSE-SU-2024:2400-1, SUSE-SU-2024:2397-1
openSUSE Leap 15.5 python-zipp 3.15.0-150400.10.10.1 SUSE-SU-2024:2400-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 py3-zipp 3.23.0-r0 —
Alpine v3.23 py3-zipp 3.23.0-r0 —
Alpine v3.22 py3-zipp 3.17.0-r2 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 python3.11-setuptools +1 65.5.1-2.amzn2023.0.5 ALAS2023-2024-653

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-zipp 3.17.0-3 —
Azure Linux 3 tensorflow 2.16.1-9 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 python3-zipp 3.20.1-2.el9 ELSA-2025-38828, ELSA-2025-20533

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling checkov 3.0.34-r1 —
Wolfi rolling kubeflow-pipelines +11 2.2.0-r7 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI zipp < 3.19.1 3.19.1 GHSA-jfmj-5v4g-7637

Advisories 21

References