Skip to content
OpenAdvisories
Medium ELSA-2025-14841 1 CVE

Moderate: python3.11 security update (Oracle Linux 8)

Published Aug 28, 2025 · Updated Aug 28, 2025

Ecosystem: Oracle Linux

Summary

[3.11.13-2.0.1]
- Update rpm-macros description [Orabug: 36024572]

[3.11.13-2]
- Security fix for CVE-2025-8194
Resolves: RHEL-106338

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 8 python3.11 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-debug 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-devel 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-idle 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-libs 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-rpm-macros 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-test 0:3.11.13-2.0.1.el8_10
Oracle Linux · 8 python3.11-tkinter 0:3.11.13-2.0.1.el8_10

Vulnerabilities 1

  • High 7.5
    CVE-2025-8194

    Tarfile infinite loop during parsing with negative member offset

    There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsi…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi