python3.11-3.11.13-2.el8_10

エラータID: AXSA:2025-10802:08

リリース日: 
2025/09/01 Monday - 21:53
題名: 
python3.11-3.11.13-2.el8_10
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Python には、無限ループの発生、およびデッドロックに至る問題が
あるため、リモートの攻撃者により、サービス拒否攻撃を可能とする
脆弱性が存在します。(CVE-2025-8194)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2025-8194
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python3.11-3.11.13-2.el8_10.src.rpm
    MD5: 730ceba7994636e20e8f00156f697649
    SHA-256: 8502fdcad9f8f3d0b0544a44314917252e9042ae126a6e4d93a5e8eb63742760
    Size: 19.26 MB

Asianux Server 8 for x86_64
  1. python3.11-3.11.13-2.el8_10.i686.rpm
    MD5: 0fe32f7aab29df49d4e3908afd8a449e
    SHA-256: 9785251ad5d8335dd15c126506cf506dbc49671d3359f8ad8da3bcda629b5026
    Size: 30.68 kB
  2. python3.11-3.11.13-2.el8_10.x86_64.rpm
    MD5: d61913a0fd17bb584e1baa09a240009a
    SHA-256: 26bbfe5148704faea630f368904ff95651571d41dc085da938955ce7e91e8ade
    Size: 30.60 kB
  3. python3.11-debug-3.11.13-2.el8_10.i686.rpm
    MD5: d0ad7e803abd2de2b0fb03483cf8b87a
    SHA-256: e416c79552dbbb58549c58203dd2ba58f94405014e35d52f272185bef8096f22
    Size: 3.20 MB
  4. python3.11-debug-3.11.13-2.el8_10.x86_64.rpm
    MD5: eff9f41a798c254cdf419983aa13c218
    SHA-256: 285ba1c3e909ce9d0bd3c9d29e7e474009c3efa43f58971a3b0c026cced19441
    Size: 3.33 MB
  5. python3.11-devel-3.11.13-2.el8_10.i686.rpm
    MD5: f8cdf7217f35789ad80a597944153eb5
    SHA-256: ff8cad62fa9f108c3b47d2daa56ac4dc312085fa5445bfdcadc0f2d9df8d746d
    Size: 248.71 kB
  6. python3.11-devel-3.11.13-2.el8_10.x86_64.rpm
    MD5: 94ac727f87d1a5e755972401c86940d6
    SHA-256: 15dd13a25bb678b3a93b9e978c2e40d00e53cfb6b968203130a86d3e8c6f1067
    Size: 248.68 kB
  7. python3.11-idle-3.11.13-2.el8_10.i686.rpm
    MD5: dc9e1a67091d931dbff4286b17a94cba
    SHA-256: 840745361f2509d1626c938abfa3c783dac2dde3c3007ed225dd78723c8989a8
    Size: 1.32 MB
  8. python3.11-idle-3.11.13-2.el8_10.x86_64.rpm
    MD5: d515644b117611a8c770156602b164ed
    SHA-256: b757008cbc03fef88ad226bcfff39e368341a8cae3e773ad5f747cda023cf98f
    Size: 1.32 MB
  9. python3.11-libs-3.11.13-2.el8_10.i686.rpm
    MD5: 93cc50337dfc7f9074b301e8c0911be6
    SHA-256: a3fe21017088a9d195056627774d926ff15e4b4a5a7f80b62227fc8f4d31cf4b
    Size: 10.50 MB
  10. python3.11-libs-3.11.13-2.el8_10.x86_64.rpm
    MD5: f7dac2c58a904d07514a0ec6dc036a30
    SHA-256: d85dc73c177bd04d31efde11fa9388cde29a12ee7a18c5c2b2471fa8386ab1b2
    Size: 10.40 MB
  11. python3.11-rpm-macros-3.11.13-2.el8_10.noarch.rpm
    MD5: 36acf824db07e20e3b4d7aa2419150fb
    SHA-256: 520089de048cf9ed74966833211bd793b5bc9c4877171430a84bbb892286e156
    Size: 15.05 kB
  12. python3.11-test-3.11.13-2.el8_10.i686.rpm
    MD5: 2891879f681bb24caf6c5f5160e45d75
    SHA-256: 8813b14048c17ef00817a0b6bb6e02b1bf355209856538d02cc72c3f92a3626d
    Size: 15.76 MB
  13. python3.11-test-3.11.13-2.el8_10.x86_64.rpm
    MD5: 84a34bae6781c3f066ef3b21d6a5729c
    SHA-256: e3e2aea83110f5dad0c3968c5c8984462d19c6d4945a7f860f5807fe09d5fdb8
    Size: 15.75 MB
  14. python3.11-tkinter-3.11.13-2.el8_10.i686.rpm
    MD5: 5869b45b18f638b5d28da749544a1504
    SHA-256: d78b0ec61c051badc9173413dce9cb9ec4a020537566ccf5ce1ac562daa14440
    Size: 410.86 kB
  15. python3.11-tkinter-3.11.13-2.el8_10.x86_64.rpm
    MD5: afa21be5402c7d22aa1655c817c042b2
    SHA-256: 4e645bde3a2b1c08ca4b8c578d5e241707e121e00c3f6588990bb10984c1844f
    Size: 409.25 kB