CVE-2025-4435

Name of the Vulnerable Software and Affected Versions python3.12 versions prior to 3.12.7-1ubuntu2.2 python3.13 versions prior to 3.13.0-1ubuntu0.3

Description Python incorrectly handles tar archive extraction when using the filtering option. Specifically, when TarFile.errorlevel is set to 0 during extraction with a filter, the system fails to skip filtered members as documented, extracting them instead. This issue could allow a remote attacker to modify files in arbitrary filesystem locations, potentially leading to data loss or compromising the integrity of protected information.

Recommendations Update python3.12 to version 3.12.7-1ubuntu2.2. Update python3.13 to version 3.13.0-1ubuntu0.3.