DeutschShown in its original language — a full translation is planned for a future version.
CPython: Schwachstelle ermöglicht Manipulation von Dateien
view advisory published 2026-03-12
Ein lokaler Angreifer kann eine Schwachstelle in CPython ausnutzen, um Dateien zu manipulieren.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-13462US | low3.3 | — | ||
The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK.… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:10118 vom 2026-04-23external
- Red Hat Security Advisory RHSA-2026:11324 vom 2026-04-28external
- Red Hat Security Advisory RHSA-2026:7443 vom 2026-04-24external
- IBM Security Bulletin 7287454 vom 2026-09-15external
- Amazon Linux Security Advisory ALAS2-2026-3227 vom 2026-04-14external
- Amazon Linux Security Advisory ALAS2-2026-3228 vom 2026-04-14external
- Red Hat Bugtracker #2447082 vom 2026-03-12external
- GitHub CPython Issue #141707 vom 2026-03-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan