CVE-2025-13462
Fixed in a distro release EPSS <1%CVSS 2.0
The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.
Products: Python Software Foundation CPython
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | python-3.10 | 3.10.21-r6 |
| Chainguard | python-3.11 | 3.11.15-r9 |
| Chainguard | python-3.12 | 3.12.14-r8 |
| Chainguard | python-3.13 | 3.13.13-r0 |
| Chainguard | python-3.14 | 3.14.4-r0 |
| Chainguard | python-3.9 | no fix |
| Debian 12 | python3.11 | 3.11.2-6+deb12u8 |
| Debian 13 | python3.13 | 3.13.5-2+deb13u1 |
| Debian 14 | python3.13 | 3.13.14-1 |
| Debian 14 | python3.14 | 3.14.3-4 |
| Red Hat hummingbird 1 | python-unversioned-command | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3 | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3-debug | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3-devel | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3-idle | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3-libs | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3-test | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3-tkinter | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.11 | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.11-debug | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.11-devel | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.11-idle | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.11-libs | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.11-test | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.11-tkinter | 0:3.11.15-4.2.hum1 |
| Red Hat hummingbird 1 | python3.12 | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.12-debug | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.12-devel | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.12-idle | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.12-libs | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.12-test | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.12-tkinter | 0:3.12.13-3.1.hum1 |
| Red Hat hummingbird 1 | python3.13 | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-debug | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-devel | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-freethreading-debug | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-idle | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-libs | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-test | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.13-tkinter | 0:3.13.13-1.hum1 |
| Red Hat hummingbird 1 | python3.14 | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-debug | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-devel | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-idle | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-libs | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-test | 0:3.14.4-1.hum1 |
| Red Hat hummingbird 1 | python3.14-freethreading-tkinter | 0:3.14.4-1.hum1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python310 | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python310-core | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python310 | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python310-core | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | python311-core | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python | 2.7.18-150000.111.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | python-base | 2.7.18-150000.111.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python311 | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python311-core | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313 | 3.13.13-150700.4.45.1 |
| SUSE Linux Enterprise Module for Python 3 15 SP7 | python313-core | 3.13.13-150700.4.45.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python | 2.7.18-33.74.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python-base | 2.7.18-33.74.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python-doc | 2.7.18-33.74.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python3 | 3.4.10-25.180.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python3-base | 3.4.10-25.180.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python36 | 3.6.15-108.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | python36-core | 3.6.15-108.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python310 | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python310-core | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python39 | 3.9.25-150300.4.99.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | python39-core | 3.9.25-150300.4.99.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python311 | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python311-core | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python312 | 3.12.14-150600.3.68.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python312 | 3.12.13-150600.3.53.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python312-core | 3.12.13-150600.3.53.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | python312-core | 3.12.14-150600.3.68.1 |
| SUSE Linux Enterprise Server 16.0 | python313 | 3.13.13-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | python313-core | 3.13.13-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | python313-documentation | 3.13.13-160000.1.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python | 2.7.18-33.74.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python-base | 2.7.18-33.74.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python-doc | 2.7.18-33.74.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python3 | 3.4.10-25.180.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python3-base | 3.4.10-25.180.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python36 | 3.6.15-108.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | python36-core | 3.6.15-108.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python310 | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python310-core | 3.10.20-150400.4.107.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python311 | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python311-core | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python311-documentation | 3.11.15-150400.9.85.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python39 | 3.9.25-150300.4.99.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | python39-core | 3.9.25-150300.4.99.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python311 | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python311-core | 3.11.15-150600.3.53.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python312 | 3.12.13-150600.3.53.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python312 | 3.12.14-150600.3.68.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python312-core | 3.12.13-150600.3.53.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | python312-core | 3.12.14-150600.3.68.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | python313 | 3.13.13-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | python313-core | 3.13.13-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | python313-documentation | 3.13.13-160000.1.1 |
| SUSE Linux Micro 6.1 | python311 | 3.11.15-slfo.1.1_3.1 |
| SUSE Linux Micro 6.1 | python311 | 3.11.16-slfo.1.1_1.1 |
| SUSE Linux Micro 6.1 | python311-core | 3.11.15-slfo.1.1_3.1 |
| SUSE Linux Micro 6.1 | python311-core | 3.11.16-slfo.1.1_1.1 |
| SUSE Linux Micro 6.2 | python313 | 3.13.13-160000.1.1 |
| SUSE Linux Micro 6.2 | python313-core | 3.13.13-160000.1.1 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.16 |
| Ubuntu 24.04 LTS | python3.12 | 3.12.3-1ubuntu0.15 |
| Ubuntu 25.10 | python3.13 | no fix |
| Ubuntu 25.10 | python3.14 | no fix |
| Ubuntu 26.04 LTS | python3.14 | 3.14.4-1ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | python2.7 | no fix |
| Ubuntu Pro 14.04 LTS | python3.4 | no fix |
| Ubuntu Pro 14.04 LTS | python3.5 | no fix |
| Ubuntu Pro 16.04 LTS | python2.7 | no fix |
| Ubuntu Pro 16.04 LTS | python3.5 | no fix |
| Ubuntu Pro 18.04 LTS | python2.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.6 | no fix |
| Ubuntu Pro 18.04 LTS | python3.7 | no fix |
| Ubuntu Pro 18.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python2.7 | no fix |
| Ubuntu Pro 20.04 LTS | python3.8 | no fix |
| Ubuntu Pro 20.04 LTS | python3.9 | no fix |
| Ubuntu Pro 22.04 LTS | python2.7 | no fix |
| Ubuntu Pro 22.04 LTS | python3.11 | no fix |
| Wolfi | python-3.10 | 3.10.21-r6 |
| Wolfi | python-3.11 | 3.11.15-r9 |
| Wolfi | python-3.12 | 3.12.14-r8 |
| Wolfi | python-3.13 | 3.13.13-r0 |
| Wolfi | python-3.14 | 3.14.4-r0 |
| openSUSE Leap 15.6 | python | 2.7.18-150000.111.1 |
| openSUSE Leap 15.6 | python-base | 2.7.18-150000.111.1 |
| openSUSE Leap 15.6 | python-doc | 2.7.18-150000.111.1 |
| openSUSE Leap 15.6 | python310 | 3.10.20-150400.4.107.1 |
| openSUSE Leap 15.6 | python310-core | 3.10.20-150400.4.107.1 |
| openSUSE Leap 15.6 | python310-documentation | 3.10.20-150400.4.107.1 |
| openSUSE Leap 15.6 | python311 | 3.11.15-150600.3.53.1 |
| openSUSE Leap 15.6 | python311-core | 3.11.15-150600.3.53.1 |
| openSUSE Leap 15.6 | python311-documentation | 3.11.15-150600.3.53.1 |
| openSUSE Leap 15.6 | python312 | 3.12.13-150600.3.53.1 |
| openSUSE Leap 15.6 | python312-core | 3.12.13-150600.3.53.1 |
| openSUSE Leap 15.6 | python312-documentation | 3.12.13-150600.3.53.1 |
| openSUSE Leap 15.6 | python39 | 3.9.25-150300.4.99.1 |
| openSUSE Leap 15.6 | python39-core | 3.9.25-150300.4.99.1 |
| openSUSE Leap 15.6 | python39-documentation | 3.9.25-150300.4.99.1 |
| openSUSE Leap 16.0 | python313 | 3.13.13-160000.1.1 |
| openSUSE Leap 16.0 | python313-core | 3.13.13-160000.1.1 |
| openSUSE Leap 16.0 | python313-documentation | 3.13.13-160000.1.1 |
| openSUSE Leap 16.0 | python313-nogil | 3.13.13-160000.1.1 |
| openSUSE Leap 16.0 | python313-nogil-nogil-core | 3.13.13-160000.1.1 |
| openSUSE Tumbleweed | python310 | 3.10.20-3.1 |
| openSUSE Tumbleweed | python311 | 3.11.15-4.1 |
| openSUSE Tumbleweed | python312 | 3.12.13-4.1 |
| openSUSE Tumbleweed | python313 | 3.13.12-3.1 |
| openSUSE Tumbleweed | python314 | 3.14.3-4.1 |
| openSUSE Tumbleweed | python315 | 3.15.0~a7-3.1 |