RHSA-2025:10026 — Red Hat Security Advisory: python3.11 security update

Fixed packages 14

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11-debuginfo	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11-debugsource	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11-devel	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11-libs	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11-rpm-macros	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3.11-tkinter	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11-debug	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11-debuginfo	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11-debugsource	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11-idle	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11-test	0:3.11.13-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb	python3.11-tkinter	0:3.11.13-1.el8_10

Vulnerabilities 5

Critical 9.4

CVE-2025-4517 Public exploit

Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
High 7.5

CVE-2025-4138 Public exploit

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
High 7.5

CVE-2025-4330

Extraction filter bypass for linking outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
High 7.5

CVE-2025-4435

Tarfile extracts filtered members when errorlevel=0

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Wolfi

Jun 3, 2025
Medium 5.3

CVE-2024-12718

Bypass extraction filter to modify file metadata outside extraction directory

Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar ar…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370010
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370013
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370014
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370016
report
https://bugzilla.redhat.com/show_bug.cgi?id=2372426
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10026.json
report
https://access.redhat.com/security/cve/CVE-2024-12718
advisory
https://www.cve.org/CVERecord?id=CVE-2024-12718
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-12718
article
https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
article
https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
article
https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
article
https://github.com/python/cpython/issues/127987
article
https://github.com/python/cpython/issues/135034
article
https://github.com/python/cpython/pull/135037
article
https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/
report
https://access.redhat.com/security/cve/CVE-2025-4138
advisory
https://www.cve.org/CVERecord?id=CVE-2025-4138
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-4138
report
https://access.redhat.com/security/cve/CVE-2025-4330
advisory
https://www.cve.org/CVERecord?id=CVE-2025-4330
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-4330
report
https://access.redhat.com/security/cve/CVE-2025-4435
advisory
https://www.cve.org/CVERecord?id=CVE-2025-4435
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-4435
report
https://access.redhat.com/security/cve/CVE-2025-4517
advisory
https://www.cve.org/CVERecord?id=CVE-2025-4517
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-4517

Red Hat Security Advisory: python3.11 security update

Fixed packages 14

Vulnerabilities 5

Arbitrary writes via tarfile realpath overflow

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Extraction filter bypass for linking outside extraction directory

Tarfile extracts filtered members when errorlevel=0

Bypass extraction filter to modify file metadata outside extraction directory

References