【OCS】【漏洞修复】CVE-2024-8088：python3.12无影响漏洞

<div>
 <div class="document">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【软件包名】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">python3.12<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【CVE ID】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CVE-2024-8088<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【漏洞评级】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">None<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【评分向量】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【CWE ID】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CWE-835<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【漏洞描述】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">There is a HIGH severity vulnerability affecting the CPython "zipfile"
module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected.

When iterating over names of entries in a zip archive (for example, methods
of "zipfile.Path" like "namelist()", "iterdir()", etc)
the process can be put into an infinite loop with a maliciously crafted
zip archive. This defect applies when reading only metadata or extracting
the contents of the zip archive. Programs that are not handling
user-controlled zip archives are not affected.<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【参考链接】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 
 </div>
 </div>

OpenCloudOS Stream/python3.12

内容风险标识

评论 (0)

OpenCloudOS Stream/python3.12 .gitee-modal { width: 500px !important; }

内容风险标识