Search CVE reports
11 – 14 of 14 results
Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module...
12 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | Not in release | Not affected | Not affected | Not affected |
| python3.4 | Not in release | Not in release | — | — |
| python3.5 | Not in release | Not in release | — | — |
| python3.6 | Not in release | Not in release | — | Not affected |
| python3.7 | Not in release | Not in release | — | Not affected |
| python3.8 | Not in release | Not in release | Not affected | Not affected |
| python3.9 | Not in release | Not in release | Not affected | — |
| python3.10 | Not in release | Not affected | — | — |
| python3.11 | Not in release | Not affected | — | — |
| python3.12 | Fixed | Not in release | — | — |
| python3.13 | Not in release | Not in release | — | — |
| python3.14 | Not in release | Not in release | — | — |
Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the...
12 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | Not in release | Not affected | Not affected | Not affected |
| python3.4 | Not in release | Not in release | — | — |
| python3.5 | Not in release | Not in release | — | — |
| python3.6 | Not in release | Not in release | — | Not affected |
| python3.7 | Not in release | Not in release | — | Not affected |
| python3.8 | Not in release | Not in release | Not affected | Not affected |
| python3.9 | Not in release | Not in release | Not affected | — |
| python3.10 | Not in release | Not affected | — | — |
| python3.11 | Not in release | Not affected | — | — |
| python3.12 | Fixed | Not in release | — | — |
| python3.13 | Not in release | Not in release | — | — |
| python3.14 | Not in release | Not in release | — | — |
Some fixes available 11 of 12
There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may...
12 affected packages
python2.7, python3.10, python3.11, python3.12, python3.13...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | Not in release | Not affected | Not affected | Not affected |
| python3.10 | Not in release | Fixed | Not in release | — |
| python3.11 | Not in release | Fixed | Not in release | — |
| python3.12 | Fixed | Not in release | Not in release | — |
| python3.13 | Not in release | Not in release | Not in release | — |
| python3.14 | Not in release | Not in release | Not in release | — |
| python3.4 | Not in release | Not in release | Not in release | — |
| python3.5 | Not in release | Not in release | Not in release | — |
| python3.6 | Not in release | Not in release | Not in release | Fixed |
| python3.7 | Not in release | Not in release | Not in release | Fixed |
| python3.8 | Not in release | Not in release | Fixed | Fixed |
| python3.9 | Not in release | Not in release | Fixed | — |
Some fixes available 8 of 11
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a...
12 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | Not in release | Not affected | Not affected | Not affected |
| python3.4 | Not in release | Not in release | Not in release | — |
| python3.5 | Not in release | Not in release | Not in release | — |
| python3.6 | Not in release | Not in release | Not in release | Fixed |
| python3.7 | Not in release | Not in release | Not in release | Fixed |
| python3.8 | Not in release | Not in release | Fixed | Fixed |
| python3.9 | Not in release | Not in release | Fixed | — |
| python3.10 | Not in release | Fixed | Not in release | — |
| python3.11 | Not in release | Fixed | Not in release | — |
| python3.12 | Fixed | Not in release | Not in release | — |
| python3.13 | Not in release | Not in release | Not in release | — |
| python3.14 | Not in release | Not in release | Not in release | — |