Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-15007

Опубликовано: 02 сент. 2025
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2025-15007: python3.12 security update (MODERATE)

[3.12.9-1.2]

  • Security fix for CVE-2025-8194 Resolves: RHEL-106370

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

python3.12

3.12.9-1.el9_6.2

python3.12-debug

3.12.9-1.el9_6.2

python3.12-devel

3.12.9-1.el9_6.2

python3.12-idle

3.12.9-1.el9_6.2

python3.12-libs

3.12.9-1.el9_6.2

python3.12-test

3.12.9-1.el9_6.2

python3.12-tkinter

3.12.9-1.el9_6.2

Oracle Linux x86_64

python3.12

3.12.9-1.el9_6.2

python3.12-debug

3.12.9-1.el9_6.2

python3.12-devel

3.12.9-1.el9_6.2

python3.12-idle

3.12.9-1.el9_6.2

python3.12-libs

3.12.9-1.el9_6.2

python3.12-test

3.12.9-1.el9_6.2

python3.12-tkinter

3.12.9-1.el9_6.2

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module: https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

CVSS3: 7.5
redhat
3 месяца назад

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

CVSS3: 7.5
nvd
3 месяца назад

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

CVSS3: 7.5
debian
3 месяца назад

There is a defect in the CPython \u201ctarfile\u201d module affecting ...

suse-cvrf
около 2 месяцев назад

Security update for python