TI-2025-07498 CVE-2025-8194 · GHSA-v594-44hm-2j7p
Tarfile infinite loop during parsing with negative member offset
Priority MEDIUM 40
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs.
RHSA-2025:16078
python39:3.9 security update
Released 2025-09-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47