python3.12-3.12.11-2.el8_10

エラータID: AXSA:2025-10803:10

リリース日: 
2025/09/01 Monday - 22:01
題名: 
python3.12-3.12.11-2.el8_10
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Python には、無限ループの発生、およびデッドロックに至る問題が
あるため、リモートの攻撃者により、サービス拒否攻撃を可能とする
脆弱性が存在します。(CVE-2025-8194)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2025-8194
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python3.12-3.12.11-2.el8_10.src.rpm
    MD5: 901dbe18db0384a93fa00f46000835b9
    SHA-256: 27a9ee0bfb33e6fa91438c9276144fd0b8323562c3bb21237a5cc449d2ca17b5
    Size: 19.64 MB

Asianux Server 8 for x86_64
  1. python3.12-3.12.11-2.el8_10.i686.rpm
    MD5: 591ea1cee62e3ff0bf0be8146509f736
    SHA-256: f04a123fa43bc4f9c97ff52894f8386618371eb9fd962cf26cbcbf6e269e6695
    Size: 30.17 kB
  2. python3.12-3.12.11-2.el8_10.x86_64.rpm
    MD5: 953ea28e4db9a9e006b24116576e2c3e
    SHA-256: 96f2b307a1381135a6b52620e50a8e05e898a5dfa119376e5ed38986e598a053
    Size: 30.08 kB
  3. python3.12-debug-3.12.11-2.el8_10.i686.rpm
    MD5: 18e78f791660fd1a47746e546e927b26
    SHA-256: 481307d9e293fc1ce9dbb1ef81256412d4c94f1ec5dce12af674cf1b088e213e
    Size: 3.50 MB
  4. python3.12-debug-3.12.11-2.el8_10.x86_64.rpm
    MD5: 42e972abf3e1bea89fd7739295781597
    SHA-256: 15b7478adeb8709316a3fc343137638094db6199ac8a2985513ab5e78eafcf34
    Size: 3.69 MB
  5. python3.12-devel-3.12.11-2.el8_10.i686.rpm
    MD5: 4252b27956bbd09099f28bc4f25d5c09
    SHA-256: cfed9c800acaf15c9e636568863762385c547103030d4934402a084b0e2d3160
    Size: 291.18 kB
  6. python3.12-devel-3.12.11-2.el8_10.x86_64.rpm
    MD5: 4e06e3b33d94e307141f315a4ca87f27
    SHA-256: 3316639f0faba2d611a67c92e4655d6fcccf0ede5b0951e9e3e44e447107592a
    Size: 291.08 kB
  7. python3.12-idle-3.12.11-2.el8_10.i686.rpm
    MD5: d6c0e6b54d61933d6e5b23aca607be10
    SHA-256: cda73361d089fd364c66121ba26cfac6dbc708935ba9ed9f1b9affc561fb3981
    Size: 1.29 MB
  8. python3.12-idle-3.12.11-2.el8_10.x86_64.rpm
    MD5: 93808809c00858f4add264974ed50e66
    SHA-256: 68fe1db9aea996a3791e163d0178dc4cf4546cc53a4ec6a805587caf02fc1da3
    Size: 1.29 MB
  9. python3.12-libs-3.12.11-2.el8_10.i686.rpm
    MD5: ae172d88317067943265323757f1b43b
    SHA-256: 19120a3acc8803a9a1554f2ccec857a2760e0a9e1e168552a16533ecf8e9575e
    Size: 10.10 MB
  10. python3.12-libs-3.12.11-2.el8_10.x86_64.rpm
    MD5: 449b4401104fb2f87c07092b5a07a735
    SHA-256: de8f5e5b3a78603131f747365ab5f38b433c0e8a70640b1d744d556b076b2954
    Size: 10.02 MB
  11. python3.12-rpm-macros-3.12.11-2.el8_10.noarch.rpm
    MD5: 9bdd0c376e06803181e7b569885a4a91
    SHA-256: 86c9a1e62840118d7d18d27d9749f35d5cc1a98f2974386adb475dadd9c87d51
    Size: 16.50 kB
  12. python3.12-test-3.12.11-2.el8_10.i686.rpm
    MD5: 33401dff35626ea5d8f806675cd27dc3
    SHA-256: 0f9985be4d4045ac0564445f7a66cb39eda66d02b6baa69c365813fa5c6deccc
    Size: 15.99 MB
  13. python3.12-test-3.12.11-2.el8_10.x86_64.rpm
    MD5: 7f5dae9e40239dff15647498cacbc4a8
    SHA-256: 655c5c65f2486fe3de7aef78bff33a85f98c8753ad2964864a7cab97dc34d917
    Size: 15.98 MB
  14. python3.12-tkinter-3.12.11-2.el8_10.i686.rpm
    MD5: 912766c95437c4d97625553245d39f59
    SHA-256: 8a4c26638f049979360a030478f4aa7414e36cd952b7decc51edbe81bfd6cdb2
    Size: 402.89 kB
  15. python3.12-tkinter-3.12.11-2.el8_10.x86_64.rpm
    MD5: c070d5d0e337036b33ff13b2815b9ffc
    SHA-256: 2925a5f11d925be65030f17394d1929688294835a0019b75a18d4ee30c73623b
    Size: 401.64 kB