Red Hat Security AdvisoryRHSA-2023:7151
python3 security update
Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-56.el8_9, platform-python-debug-3.6.8-56.el8_9, platform-python-devel-3.6.8-56.el8_9 +3
- Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-56.el8_9, python3-3.6.8-56.el8_9, python3-libs-3.6.8-56.el8_9 +1
Fixes 1 record
Priority HIGH 82
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a ..
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.27095 · Published 2007-08-28 · Partial fix CWE-22
