TI-2025-07498 CVE-2025-8194 · GHSA-v594-44hm-2j7p
Tarfile infinite loop during parsing with negative member offset
Priority MEDIUM 40
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs.
RHSA-2025:15968
python3 security update
Released 2025-09-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) platform-python-3.6.8-47.el8_6.9, platform-python-debug-3.6.8-47.el8_6.9, platform-python-devel-3.6.8-47.el8_6.9 +3
- Red Hat Enterprise Linux AppStream E4S (v.8.6) platform-python-3.6.8-47.el8_6.9, platform-python-debug-3.6.8-47.el8_6.9, platform-python-devel-3.6.8-47.el8_6.9 +3
- Red Hat Enterprise Linux AppStream TUS (v.8.6) platform-python-3.6.8-47.el8_6.9, platform-python-debug-3.6.8-47.el8_6.9, platform-python-devel-3.6.8-47.el8_6.9 +3
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) platform-python-3.6.8-47.el8_6.9, python3-3.6.8-47.el8_6.9, python3-libs-3.6.8-47.el8_6.9 +1
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) platform-python-3.6.8-47.el8_6.9, python3-3.6.8-47.el8_6.9, python3-libs-3.6.8-47.el8_6.9 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) platform-python-3.6.8-47.el8_6.9, python3-3.6.8-47.el8_6.9, python3-libs-3.6.8-47.el8_6.9 +1