RHSA-2025:23530 — Red Hat Security Advisory: python39:3.9 security update

Fixed packages 102

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_wsgi	0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	numpy	0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	numpy-debugsource	0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-cffi	0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-cffi-debugsource	0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-chardet	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-cryptography	0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-cryptography-debugsource	0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-idna	0:2.10-4.module+el8.10.0+21815+bb024982
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-lxml	0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-lxml-debugsource	0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-ply	0:3.11-10.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psutil	0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psutil-debugsource	0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psycopg2	0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-psycopg2-debugsource	0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pycparser	0:2.20-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-PyMySQL	0:0.10.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-pysocks	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-requests	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-toml	0:0.10.1-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-urllib3	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Red Hat · RHEL 8 enterprise_linux:8::appstream	python-wheel	1:0.35.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-cffi	0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-cffi-debuginfo	0:1.14.3-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-chardet	0:3.0.4-19.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-cryptography	0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-cryptography-debuginfo	0:3.3.1-3.module+el8.10.0+21271+eccd1d86
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-debuginfo	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-debugsource	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-devel	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-idle	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-idna	0:2.10-4.module+el8.10.0+21815+bb024982
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-libs	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-lxml	0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-lxml-debuginfo	0:4.6.5-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-mod_wsgi	0:4.7.1-7.module+el8.10.0+23075+0aa18782.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-numpy	0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-numpy-debuginfo	0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-numpy-doc	0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-numpy-f2py	0:1.19.4-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-pip	0:20.2.4-9.module+el8.10.0+21329+8d76b841
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-pip-wheel	0:20.2.4-9.module+el8.10.0+21329+8d76b841
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-ply	0:3.11-10.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-psutil	0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-psutil-debuginfo	0:5.8.0-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-psycopg2	0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-psycopg2-debuginfo	0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-psycopg2-doc	0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-psycopg2-tests	0:2.8.6-3.module+el8.10.0+21142+453d2b75
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-pycparser	0:2.20-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-PyMySQL	0:0.10.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-pysocks	0:1.7.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-pyyaml	0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-pyyaml-debuginfo	0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-requests	0:2.25.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-rpm-macros	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-scipy	0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-scipy-debuginfo	0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-setuptools	0:50.3.2-7.module+el8.10.0+23406+03055bfb
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-setuptools-wheel	0:50.3.2-7.module+el8.10.0+23406+03055bfb
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-six	0:1.15.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-test	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-tkinter	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-toml	0:0.10.1-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-urllib3	0:1.25.10-5.module+el8.10.0+20443+f0a692fe
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-wheel	1:0.35.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python39-wheel-wheel	1:0.35.1-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3x-pip	0:20.2.4-9.module+el8.10.0+21329+8d76b841
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3x-setuptools	0:50.3.2-7.module+el8.10.0+23406+03055bfb
Red Hat · RHEL 8 enterprise_linux:8::appstream	python3x-six	0:1.15.0-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	PyYAML	0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	PyYAML-debugsource	0:5.4.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	scipy	0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::appstream	scipy-debugsource	0:1.5.4-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	Cython	0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	Cython-debugsource	0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	pybind11	0:2.7.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	pytest	0:6.0.2-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-attrs	0:20.3.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-iniconfig	0:1.1.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-more-itertools	0:8.5.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-packaging	0:20.4-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-pluggy	0:0.13.1-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-py	0:1.10.0-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python-wcwidth	0:0.2.5-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-attrs	0:20.3.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-Cython	0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-Cython-debuginfo	0:0.29.21-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-debug	0:3.9.25-2.module+el8.10.0+23718+1842ae33
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-iniconfig	0:1.1.1-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-more-itertools	0:8.5.0-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-packaging	0:20.4-4.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-pluggy	0:0.13.1-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-py	0:1.10.0-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-pybind11	0:2.7.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-pybind11-devel	0:2.7.1-1.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-pyparsing	0:2.4.7-5.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-pytest	0:6.0.2-2.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python39-wcwidth	0:0.2.5-3.module+el8.9.0+19644+d68f775d
Red Hat · RHEL 8 enterprise_linux:8::crb	python3x-pyparsing	0:2.4.7-5.module+el8.9.0+19644+d68f775d

Vulnerabilities 12

Critical 9.4

CVE-2025-4517 Public exploit

Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
High 7.5

CVE-2025-4138 Public exploit

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
High 7.5

CVE-2025-4330

Extraction filter bypass for linking outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi

Jun 3, 2025
High 7.5

CVE-2025-4435

Tarfile extracts filtered members when errorlevel=0

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still…

Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Wolfi

Jun 3, 2025
Medium 6.5

CVE-2024-5642

Buffer overread when using an empty list with SSLContext.set_npn_protocols()

CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vu…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu

Jun 27, 2024
Medium 6.3

CVE-2024-11168

Improper validation of IPv6 and IPvFuture addresses

The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one U…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

Nov 12, 2024
Medium 6.3

CVE-2025-0938

URL parser allowed square brackets in domain names

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi

Jan 31, 2025
Medium 5.9

CVE-2025-4516

Use-after-free in "unicode_escape" decoder with error handler

There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handle…

Python Software Foundation CPython python3.6 python3.8 Debian Ubuntu Azure Linux Alpine Wolfi

May 15, 2025
Medium 5.3

CVE-2024-9287

Virtual environment (venv) activation scripts don't quote paths

A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi

Oct 22, 2024
Medium 4.3

CVE-2025-6069

HTMLParser quadratic complexity when processing malformed inputs

The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

Jun 17, 2025
Medium 4.3

CVE-2025-8291

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP a…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

Oct 7, 2025
Low 1.8

CVE-2025-6075

Quadratic complexity in os.path.expandvars() with user-controlled template

If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

Oct 31, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2294682
report
https://bugzilla.redhat.com/show_bug.cgi?id=2321440
report
https://bugzilla.redhat.com/show_bug.cgi?id=2325776
report
https://bugzilla.redhat.com/show_bug.cgi?id=2343237
report
https://bugzilla.redhat.com/show_bug.cgi?id=2366509
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370010
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370014
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370016
report
https://bugzilla.redhat.com/show_bug.cgi?id=2372426
report
https://bugzilla.redhat.com/show_bug.cgi?id=2373234
report
https://bugzilla.redhat.com/show_bug.cgi?id=2402342
report
https://bugzilla.redhat.com/show_bug.cgi?id=2408891
article
https://issues.redhat.com/browse/RHEL-128539
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23530.json
report
https://access.redhat.com/security/cve/CVE-2024-5642
advisory
https://www.cve.org/CVERecord?id=CVE-2024-5642
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-5642
article
https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/
report
https://access.redhat.com/security/cve/CVE-2024-9287
advisory
https://www.cve.org/CVERecord?id=CVE-2024-9287
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-9287
article
https://github.com/python/cpython/issues/124651
article
https://github.com/python/cpython/pull/124712
article
https://mail.python.org/archives/list/security-announce@python.org/thread/RSPJ2B5JL22FG3TKUJ7D7DQ4N5JRRBZL/
report
https://access.redhat.com/security/cve/CVE-2024-11168
advisory
https://www.cve.org/CVERecord?id=CVE-2024-11168
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-11168
article
https://github.com/python/cpython/commit/29f348e232e82938ba2165843c448c2b291504c5
article
https://github.com/python/cpython/commit/b2171a2fd41416cf68afd67460578631d755a550
article
https://github.com/python/cpython/issues/103848
article
https://github.com/python/cpython/pull/103849
article
https://mail.python.org/archives/list/security-announce@python.org/thread/XPWB6XVZ5G5KGEI63M4AWLIEUF5BPH4T/
report
https://access.redhat.com/security/cve/CVE-2025-0938
advisory
https://www.cve.org/CVERecord?id=CVE-2025-0938
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-0938
article
https://github.com/python/cpython/issues/105704
article
https://github.com/python/cpython/pull/129418
report
https://access.redhat.com/security/cve/CVE-2025-4138

Red Hat Security Advisory: python39:3.9 security update

Fixed packages 102

Vulnerabilities 12

Arbitrary writes via tarfile realpath overflow

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Extraction filter bypass for linking outside extraction directory

Tarfile extracts filtered members when errorlevel=0

Buffer overread when using an empty list with SSLContext.set_npn_protocols()

Improper validation of IPv6 and IPvFuture addresses

URL parser allowed square brackets in domain names

Use-after-free in "unicode_escape" decoder with error handler

Virtual environment (venv) activation scripts don't quote paths

HTMLParser quadratic complexity when processing malformed inputs

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

Quadratic complexity in os.path.expandvars() with user-controlled template

References