Security update for python3

This update for python3 fixes the following issues: Security fixes: CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter="data" bsc1244032 CVE-2025-4330: Fixed extraction filter bypass for linking outside extraction directory bsc1244060...

EUVD-2019-16779

Malware in sbrugna...

EUVD-2020-14295

Malware in sbrugna...

EUVD-2019-18981

Malware in sbrugna...

EUVD-2018-0332

Malware in sbrugna...

EUVD-2020-1031

Malware in sbrugna...

EUVD-2013-3249

Malware in sbrugna...

EUVD-2018-0213

Malware in sbrugna...

EUVD-2021-13507

Malware in sbrugna...

EUVD-2018-0243

Malware in sbrugna...

EUVD-2008-5762

Malware in sbrugna...

EUVD-2018-0228

Malware in sbrugna...

EUVD-2018-0399

Malware in sbrugna...

EUVD-2021-20403

Malware in sbrugna...

EUVD-2023-37574

Malicious code in bioql PyPI...

CVE-2024-48766

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php...

Amazon Linux 2 : python38-pip (ALASPYTHON3.8-2025-018)

The version of python38-pip installed on the remote host is prior to 21.0.1-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2PYTHON3.8-2025-018 advisory. Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows...

CVE-2024-57170

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichiertodelete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences e.g., ../. This vulnerability enables attackers to delete arbitrary files outside t...

Linux Distros Unpatched Vulnerability : CVE-2018-10860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while...

Linux Distros Unpatched Vulnerability : CVE-2018-10897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an...