Skip to content
OpenAdvisories
High RHSA-2025:14900 2 CVEs

Red Hat Security Advisory: python39:3.9 security update

Published Aug 31, 2025 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 102

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_wsgi 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy 0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy-debugsource 0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cffi 0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cffi-debugsource 0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-chardet 0:3.0.4-19.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cryptography 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cryptography-debugsource 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream python-idna 0:2.10-4.module+el8.10.0+21815+bb024982
Red Hat · RHEL 8 enterprise_linux:8::appstream python-lxml 0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-lxml-debugsource 0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-ply 0:3.11-10.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psutil 0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psutil-debugsource 0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2 0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2-debugsource 0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pycparser 0:2.20-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-PyMySQL 0:0.10.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pysocks 0:1.7.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-requests 0:2.25.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-toml 0:0.10.1-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python-urllib3 0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Red Hat · RHEL 8 enterprise_linux:8::appstream python-wheel 1:0.35.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cffi 0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cffi-debuginfo 0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-chardet 0:3.0.4-19.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cryptography 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cryptography-debuginfo 0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-debuginfo 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-debugsource 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-devel 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-idle 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-idna 0:2.10-4.module+el8.10.0+21815+bb024982
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-libs 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-lxml 0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-lxml-debuginfo 0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-mod_wsgi 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy 0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy-debuginfo 0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy-doc 0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy-f2py 0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pip 0:20.2.4-9.module+el8.10.0+21329+8d76b841
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pip-wheel 0:20.2.4-9.module+el8.10.0+21329+8d76b841
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-ply 0:3.11-10.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psutil 0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psutil-debuginfo 0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2 0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2-debuginfo 0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2-doc 0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2-tests 0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pycparser 0:2.20-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-PyMySQL 0:0.10.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pysocks 0:1.7.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pyyaml 0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pyyaml-debuginfo 0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-requests 0:2.25.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-rpm-macros 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-scipy 0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-scipy-debuginfo 0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-setuptools 0:50.3.2-7.module+el8.10.0+23406+03055bfb
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-setuptools-wheel 0:50.3.2-7.module+el8.10.0+23406+03055bfb
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-six 0:1.15.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-test 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-tkinter 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-toml 0:0.10.1-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-urllib3 0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-wheel 1:0.35.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-wheel-wheel 1:0.35.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream python3x-pip 0:20.2.4-9.module+el8.10.0+21329+8d76b841
Red Hat · RHEL 8 enterprise_linux:8::appstream python3x-setuptools 0:50.3.2-7.module+el8.10.0+23406+03055bfb
Red Hat · RHEL 8 enterprise_linux:8::appstream python3x-six 0:1.15.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream PyYAML 0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream PyYAML-debugsource 0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy 0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy-debugsource 0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb Cython 0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb Cython-debugsource 0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb pybind11 0:2.7.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb pytest 0:6.0.2-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-attrs 0:20.3.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-iniconfig 0:1.1.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-more-itertools 0:8.5.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-packaging 0:20.4-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-pluggy 0:0.13.1-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-py 0:1.10.0-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python-wcwidth 0:0.2.5-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-attrs 0:20.3.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-Cython 0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-Cython-debuginfo 0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-debug 0:3.9.20-2.module+el8.10.0+23441+1124c1da
Red Hat · RHEL 8 enterprise_linux:8::crb python39-iniconfig 0:1.1.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-more-itertools 0:8.5.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-packaging 0:20.4-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-pluggy 0:0.13.1-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-py 0:1.10.0-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-pybind11 0:2.7.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-pybind11-devel 0:2.7.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-pyparsing 0:2.4.7-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-pytest 0:6.0.2-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python39-wcwidth 0:0.2.5-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb python3x-pyparsing 0:2.4.7-5.module+el8.9.0+19644+d68f775d

Vulnerabilities 2

  • High 7.7
    CVE-2025-47273 Public exploit

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

    pypa setuptools kserve-storage-controller datadog-agent-7.77 Debian Ubuntu Azure Linux Wolfi PyPI
  • High 7.5
    CVE-2025-8194

    Tarfile infinite loop during parsing with negative member offset

    There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsi…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2366982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2384043
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14900.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-8194
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-8194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-8194
  • article
    https://github.com/python/cpython/issues/130577
  • article
    https://github.com/python/cpython/pull/137027
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/
  • report
    https://access.redhat.com/security/cve/CVE-2025-47273
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-47273
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-47273
  • article
    https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88
  • article
    https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b
  • article
    https://github.com/pypa/setuptools/issues/4946
  • article
    https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf