TI-2025-07498 CVE-2025-8194 · GHSA-v594-44hm-2j7p
Tarfile infinite loop during parsing with negative member offset
Priority MEDIUM 40
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs.
RHSA-2025:16151
python3 security update
Released 2025-09-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) platform-python-3.6.8-39.el8_4.7, platform-python-debug-3.6.8-39.el8_4.7, platform-python-devel-3.6.8-39.el8_4.7 +3
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) platform-python-3.6.8-39.el8_4.7, platform-python-debug-3.6.8-39.el8_4.7, platform-python-devel-3.6.8-39.el8_4.7 +3
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) platform-python-3.6.8-39.el8_4.7, python3-3.6.8-39.el8_4.7, python3-libs-3.6.8-39.el8_4.7 +1
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) platform-python-3.6.8-39.el8_4.7, python3-3.6.8-39.el8_4.7, python3-libs-3.6.8-39.el8_4.7 +1