Skip to content
OpenAdvisories
Medium ELSA-2025-23323 1 CVE

Moderate: python3.12 security update (Oracle Linux 9)

Published Dec 18, 2025 · Updated Dec 18, 2025

Ecosystem: Oracle Linux

Summary

[3.12.12-1.0.1]
- Remove upstream URL reference

[3.12.12-1]
- Update to 3.12.12
Resolves: RHEL-125856

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 9 python3.12 0:3.12.12-1.0.1.el9_7
Oracle Linux · 9 python3.12-debug 0:3.12.12-1.0.1.el9_7
Oracle Linux · 9 python3.12-devel 0:3.12.12-1.0.1.el9_7
Oracle Linux · 9 python3.12-idle 0:3.12.12-1.0.1.el9_7
Oracle Linux · 9 python3.12-libs 0:3.12.12-1.0.1.el9_7
Oracle Linux · 9 python3.12-test 0:3.12.12-1.0.1.el9_7
Oracle Linux · 9 python3.12-tkinter 0:3.12.12-1.0.1.el9_7

Vulnerabilities 1

  • Medium 4.3
    CVE-2025-8291

    ZIP64 End of Central Directory (EOCD) Locator record offset not checked

    The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP a…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi