Synopsis
| Issued | 2025-06-13 |
| Severity | Critical |
| Updated Packages | kusanagi-python312 |
| Affected Products | KUSANAGI 9, Business Edition, Page Speed Technology |
Description
An update for kusanagi-php81 is now available.
Security fix(es):
- Fixed (cpython: Bypass extraction filter to modify file metadata outside extraction directory). (CVE-2024-12718)
- Fixed (cpython: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory). (CVE-2025-4138)
- Fixed (cpython: Extraction filter bypass for linking outside extraction directory). (CVE-2025-4330)
- Fixed (cpython: Arbitrary writes via tarfile realpath overflow). (CVE-2025-4517)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE information may not yet be available on those websites.
