Red Hat Security Advisory: python3 security update

Fixed packages 56

Vulnerabilities 5

• Critical 9.4
  CVE-2025-4517 Public exploit

  Arbitrary writes via tarfile realpath overflow

  Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

  Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 3, 2025
• High 7.5
  CVE-2025-4138 Public exploit

  Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

  Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

  Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 3, 2025
• High 7.5
  CVE-2025-4330

  Extraction filter bypass for linking outside extraction directory

  Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

  Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 3, 2025
• High 7.5
  CVE-2025-4435

  Tarfile extracts filtered members when errorlevel=0

  When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still…

  Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Wolfi
  Jun 3, 2025
• Medium 5.3
  CVE-2024-12718

  Bypass extraction filter to modify file metadata outside extraction directory

  Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar ar…

  Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 3, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2370010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2370013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2370014
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2370016
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2372426
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10484.json
• report
  https://access.redhat.com/security/cve/CVE-2024-12718
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12718
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12718
• article
  https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
• article
  https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
• article
  https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
• article
  https://github.com/python/cpython/issues/127987
• article
  https://github.com/python/cpython/issues/135034
• article
  https://github.com/python/cpython/pull/135037
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/
• report
  https://access.redhat.com/security/cve/CVE-2025-4138
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4138
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4138
• report
  https://access.redhat.com/security/cve/CVE-2025-4330
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4330
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4330
• report
  https://access.redhat.com/security/cve/CVE-2025-4435
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4435
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4435
• report
  https://access.redhat.com/security/cve/CVE-2025-4517
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4517
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4517