TI-2025-07498 CVE-2025-8194 · GHSA-v594-44hm-2j7p
Tarfile infinite loop during parsing with negative member offset
Priority MEDIUM 40
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs.
RHSA-2025:16117
python3 security update
Released 2025-09-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) python3-3.6.8-21.el7_9.2, python3-libs-3.6.8-21.el7_9.2, python3-libs-3.6.8-21.el7_9.2.ppc
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) python3-3.6.8-21.el7_9.2, python3-3.6.8-21.el7_9.2.ppc, python3-debug-3.6.8-21.el7_9.2 +9