Skip to content
OpenAdvisories
Medium ELSA-2025-14900 2 CVEs

Moderate: python39:3.9 security update (Oracle Linux 8)

Published Aug 29, 2025 · Updated Aug 29, 2025

Ecosystem: Oracle Linux

Summary

mod_wsgi
numpy
python39
[3.9.20-2]
- Security fix for CVE-2025-8194
Resolves: RHEL-106359

python3x-pip
python3x-setuptools
[50.3.2-7]
- Security fix for CVE-2025-47273
Resolves: RHEL-104339

python3x-six
python-cffi
python-chardet
python-cryptography
python-idna
python-lxml
python-ply
python-psutil
python-psycopg2
python-pycparser
python-PyMySQL
python-pysocks
python-requests
python-toml
python-urllib3
python-wheel
PyYAML
scipy
Cython
pybind11
pytest
python3x-pyparsing
python-attrs
python-iniconfig
python-more-itertools
python-packaging
python-pluggy
python-py
python-wcwidth

Fixed packages 49

ReleasePackageFixed in
Oracle Linux · 8 python39 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-attrs 0:20.3.0-2.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-cffi 0:1.14.3-2.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-chardet 0:3.0.4-19.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-cryptography 0:3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-Cython 0:0.29.21-5.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-debug 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-devel 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-idle 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-idna 0:2.10-4.module+el8.10.0+90341+71ca88f4
Oracle Linux · 8 python39-iniconfig 0:1.1.1-2.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-libs 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-lxml 0:4.6.5-1.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-mod_wsgi 0:4.7.1-7.module+el8.10.0+90647+49247197.1
Oracle Linux · 8 python39-more-itertools 0:8.5.0-2.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-numpy 0:1.19.4-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-numpy-doc 0:1.19.4-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-numpy-f2py 0:1.19.4-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-packaging 0:20.4-4.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pip 0:20.2.4-9.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-pip-wheel 0:20.2.4-9.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-pluggy 0:0.13.1-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-ply 0:3.11-10.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-psutil 0:5.8.0-4.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-psycopg2 0:2.8.6-3.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-psycopg2-doc 0:2.8.6-3.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-psycopg2-tests 0:2.8.6-3.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-py 0:1.10.0-1.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pybind11 0:2.7.1-1.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pybind11-devel 0:2.7.1-1.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pycparser 0:2.20-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-PyMySQL 0:0.10.1-2.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pyparsing 0:2.4.7-5.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pysocks 0:1.7.1-4.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pytest 0:6.0.2-2.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-pyyaml 0:5.4.1-1.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-requests 0:2.25.0-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-rpm-macros 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-scipy 0:1.5.4-5.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-setuptools 0:50.3.2-7.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-setuptools-wheel 0:50.3.2-7.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-six 0:1.15.0-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-test 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-tkinter 0:3.9.20-2.module+el8.10.0+90647+49247197
Oracle Linux · 8 python39-toml 0:0.10.1-5.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-urllib3 0:1.25.10-5.module+el8.10.0+90269+2fa22b99
Oracle Linux · 8 python39-wcwidth 0:0.2.5-3.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-wheel 1:0.35.1-4.module+el8.9.0+90016+9c2d6573
Oracle Linux · 8 python39-wheel-wheel 1:0.35.1-4.module+el8.9.0+90016+9c2d6573

Vulnerabilities 2

  • High 7.7
    CVE-2025-47273 Public exploit

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools kserve-storage-controller datadog-agent-7.77 Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.5
    CVE-2025-8194

    Tarfile infinite loop during parsing with negative member offset

    There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsi…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi