Skip to content
OpenAdvisories
Medium ELSA-2025-14560 1 CVE

Moderate: python3 security update (Oracle Linux 8)

Published Aug 26, 2025 · Updated Aug 26, 2025

Summary

[3.6.8-71.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8.openela.0]
- Add openela to supported dists

[3.6.8-71]
- Security fix for CVE-2025-8194
Resolves: RHEL-106333

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 8 platform-python 0:3.6.8-71.0.1.el8_10
Oracle Linux · 8 platform-python-debug 0:3.6.8-71.0.1.el8_10
Oracle Linux · 8 platform-python-devel 0:3.6.8-71.0.1.el8_10
Oracle Linux · 8 python3-idle 0:3.6.8-71.0.1.el8_10
Oracle Linux · 8 python3-libs 0:3.6.8-71.0.1.el8_10
Oracle Linux · 8 python3-test 0:3.6.8-71.0.1.el8_10
Oracle Linux · 8 python3-tkinter 0:3.6.8-71.0.1.el8_10

Vulnerabilities 1

  • High 7.5

    Tarfile infinite loop during parsing with negative member offset

    There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsi…