Skip to content
OpenAdvisories
High RHSA-2025:15968 1 CVE

Red Hat Security Advisory: python3 security update

Published Sep 17, 2025 · Updated Sep 7, 2026

Ecosystem: Red Hat

Fixed packages 42

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream platform-python 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream platform-python-debug 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream platform-python-devel 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-debuginfo 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-debugsource 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-idle 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-test 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream python3-tkinter 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos platform-python 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-debuginfo 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-debugsource 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-libs 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos python3-test 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream platform-python 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream platform-python-debug 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream platform-python-devel 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream python3-debuginfo 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream python3-debugsource 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream python3-idle 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream python3-test 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream python3-tkinter 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos platform-python 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-debuginfo 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-debugsource 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-libs 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos python3-test 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream platform-python 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream platform-python-debug 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream platform-python-devel 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream python3-debuginfo 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream python3-debugsource 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream python3-idle 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream python3-test 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream python3-tkinter 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos platform-python 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-debuginfo 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-debugsource 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-libs 0:3.6.8-47.el8_6.9
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos python3-test 0:3.6.8-47.el8_6.9

Vulnerabilities 1

  • High 7.5
    CVE-2025-8194

    Tarfile infinite loop during parsing with negative member offset

    There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsi…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2384043
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15968.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-8194
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-8194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-8194
  • article
    https://github.com/python/cpython/issues/130577
  • article
    https://github.com/python/cpython/pull/137027
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/