python3-3.6.8-71.el8_10.ML.1

エラータID: AXSA:2025-10807:03

リリース日: 
2025/09/02 Tuesday - 10:53
題名: 
python3-3.6.8-71.el8_10.ML.1
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Python には、無限ループの発生、およびデッドロックに至る問題が
あるため、リモートの攻撃者により、サービス拒否攻撃を可能とする
脆弱性が存在します。(CVE-2025-8194)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2025-8194
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python3-3.6.8-71.el8_10.ML.1.src.rpm
    MD5: 49abf1a85ad38b686fb8706d7b86342a
    SHA-256: 0f44154cda05df23be32fa05fdfed23790ccbed93f9a55e51ebbdca89f4d4cb2
    Size: 18.35 MB

Asianux Server 8 for x86_64
  1. platform-python-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: 82a49809d1c158cb61e07348467e02d3
    SHA-256: 7647b8e23808873c57044f93069e404db97710114332adc6d92bbdc4dc4002bb
    Size: 87.88 kB
  2. platform-python-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: 7228b6a91072ada3e8cd0fba5a16ebe6
    SHA-256: 1d6372db187037fa3dbd3caf21c4c1c7ffb90461a2ae6c59619476fc917dd6f9
    Size: 87.95 kB
  3. platform-python-debug-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: 034ab36130faa87f42c8b622dd66ae5f
    SHA-256: 639f78de9e4d26b18a858d70784c01e8c6eb611612c0bc78fc32ff9a86d10141
    Size: 2.72 MB
  4. platform-python-debug-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: 9c656e29f2b8c9b5f5c46c00aa788ed3
    SHA-256: 515c48c29dbfdfe8d3e661cfa5b47e4842183df42152d737b41352f6fba87251
    Size: 2.68 MB
  5. platform-python-devel-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: c7d796b64bb045a2c5f37c98ee8d2899
    SHA-256: a301154842f16d62717484b9b7e82f9af9e509ea9cf29f235dda4d3bfb7cfa75
    Size: 241.20 kB
  6. platform-python-devel-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: aa3fa04166721069c90444114e9b3d4f
    SHA-256: 98ac5b0eb5d4034a2eff4e2ddb2c9ffdf2df1a02e222527ce3e04c1ca939b269
    Size: 241.45 kB
  7. python3-idle-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: 5b3659aa0e65969f49870ec4df137fb1
    SHA-256: 41f70850fc2aecba37085c6ef0d51ce0cdf0315933070b257b655c89318baace
    Size: 829.32 kB
  8. python3-idle-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: d93ac3c1dab68a504e5bf2f913da3dc3
    SHA-256: e54de0af3563842021371196dae6c34ae72054ecdcd2bf0d43325d7a6e750238
    Size: 829.33 kB
  9. python3-libs-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: 3e4d99655943f1fc7037eaced77ae835
    SHA-256: e5bbfce5858b15ae300776abcb534f267c3ddc0fb538446e59cf5c02bba35e4e
    Size: 7.91 MB
  10. python3-libs-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: 98a699738a278f2314648ee23c5d6d30
    SHA-256: a25961e78f8a70f03505f762b865b9aa4478bca77190c734d5a1c28e5f72b450
    Size: 7.84 MB
  11. python3-test-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: f21626df8bbb4745bd5bbb9ef769653c
    SHA-256: 302acd286af3ebd0fca0c0b7f27644bbae7d07c3aa269478906ed2f64e3c9f17
    Size: 8.70 MB
  12. python3-test-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: 67ee00f0ec58102ccf7d5f4d8f07aa67
    SHA-256: 151d29a14afc73219164979dec3e1058ffb9326ee58d40a3cdce02f7a78f00e4
    Size: 8.71 MB
  13. python3-tkinter-3.6.8-71.el8_10.ML.1.i686.rpm
    MD5: ecfcdb1c5b5fcf46630813a6e1df920a
    SHA-256: fcea0f98421cb6147596918aa94a6fb4a9357c3f1836762b33a842e3e2ee4755
    Size: 376.17 kB
  14. python3-tkinter-3.6.8-71.el8_10.ML.1.x86_64.rpm
    MD5: f7b043bfae3e2410642e0793554664a3
    SHA-256: c5ab875169838bdb0ca35d4df8a786edd625ca8ef83d7607408cbdaa76ee33ea
    Size: 374.75 kB