Debian/python3.11: medium 4.3
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD rec
Action: Upgrade python3.11 to 3.11.2-6+deb12u7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.11.2-6+deb12u7 | - |
Fixed versions
| 3.11.2-6+deb12u7 |
Sources
- osv: DEBIAN-CVE-2025-8291#Debian:12/python3.11
- https://security-tracker.debian.org/tracker/CVE-2025-8291
published · modified · JSON