Tarfile · Tarfile · CVE-2025-4435
**Name of the Vulnerable Software and Affected Versions**
python3.12 versions prior to 3.12.7-1ubuntu2.2
python3.13 versions prior to 3.13.0-1ubuntu0.3
**Description**
Python incorrectly handles tar archive extraction when using the filtering option. Specifically, when `TarFile.errorlevel` is set to `0` during extraction with a filter, the system fails to skip filtered members as documented, extracting them instead. This issue could allow a remote attacker to modify files in arbitrary filesystem locations, potentially leading to data loss or compromising the integrity of protected information.
**Recommendations**
Update python3.12 to version 3.12.7-1ubuntu2.2.
Update python3.13 to version 3.13.0-1ubuntu0.3.