python3-3.6.8-21.0.5.0.1.el7.AXS7

エラータID: AXSA:2025-11016:07

リリース日: 
2025/11/04 Tuesday - 18:53
題名: 
python3-3.6.8-21.0.5.0.1.el7.AXS7
影響のあるチャネル: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- Python には、無限ループの発生、およびデッドロックに至る問題が
あるため、リモートの攻撃者により、サービス拒否攻撃を可能とする
脆弱性が存在します。(CVE-2025-8194)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2025-8194
There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1
追加情報: 

N/A

ダウンロード: 

Asianux Server 7 for x86_64
  1. python3-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: bf1e0d788311e2829e7aac1a2cb5a0c0
    SHA-256: 756372c96389683d73e21372b3c943a710ff4b777ceec20226cbca7753edb07c
    Size: 71.97 kB
  2. python3-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: a134b209f90b632e7330dbe552b2ec83
    SHA-256: edf812aed98e9f602ed6590b7f554430e040927b9db9d0964fe3ce42da1a04da
    Size: 71.91 kB
  3. python3-debug-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: 9ec1bd6cd4559a7b97eadd38e15b34e9
    SHA-256: 810556f46b5a207cdc7da01ab7ba159ae18ea603c1691af6a29e6e8f682a47f6
    Size: 2.42 MB
  4. python3-debug-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: 21707a6dd23aa81b908616a48810c9f1
    SHA-256: 7e4ea11abe61ba3cb2349968595412ffd6237b28897f216261a570d60802598b
    Size: 2.64 MB
  5. python3-devel-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: 62c3e867e2f1bd93651290027cee26e1
    SHA-256: f96382e04be7b0d9da634f5063c454b285c6dc3f3b30f3f0804f89e774c87479
    Size: 218.80 kB
  6. python3-devel-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: 0b8a4d26644b97c28cd4597360332cd5
    SHA-256: 662c5cc1017f760bf8c0938fdd986f27374e37776dce5c34ef91d6bbc80ff057
    Size: 218.61 kB
  7. python3-idle-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: 2f25a849d9a54136d7e84216bb07edb2
    SHA-256: 463afcfc26d49cdb5228265c27f2a3919f2f7afc99e7c3cffb3b97e4a882da7d
    Size: 781.07 kB
  8. python3-idle-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: aeb2950e647e14a6c949005e80a59842
    SHA-256: c2e3dbc56199be29df767f7bf2761b491e32046f3ec8350d2dbaa8b17d287531
    Size: 781.04 kB
  9. python3-libs-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: 61fbe803e6966368806b8263ee532625
    SHA-256: 7f274fd82c0765e38aa4d83c7bd697bc5cc5a0f19907999de9b0e86b4b9623c4
    Size: 6.86 MB
  10. python3-libs-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: 625d8099a0edaa8ddac51d9af7cab4f5
    SHA-256: 0244da2a582a82302bde6e95ddbb78bd718f50025d9fb5ed8ee3c3cdc25e5360
    Size: 6.96 MB
  11. python3-test-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: ac49d6929fd951da84e0c1b3a9419371
    SHA-256: 7fd401d7e65a5987c1202aa91cda01df4bff8afd35ec0dc31110d2b0877246c8
    Size: 7.28 MB
  12. python3-test-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: c902b3d84199f2bb5d91b0c82f95dc22
    SHA-256: ee3f9d30cb2f4c7e1344a4b1c77586f7a6316c16c4c670ff95ce2608938395fb
    Size: 7.28 MB
  13. python3-tkinter-3.6.8-21.0.5.0.1.el7.AXS7.i686.rpm
    MD5: 9c91023045f4d08cd706d42d2469638f
    SHA-256: 6e50515600d213e4ae8bb3bfcb2d6d78e02d03bd9451512d40e1c09cb616511d
    Size: 367.30 kB
  14. python3-tkinter-3.6.8-21.0.5.0.1.el7.AXS7.x86_64.rpm
    MD5: 9912c274d9e17bded8c185e293b3c796
    SHA-256: 106721922e2e90512885046c9c31a9b35547e6efd3761a19a6f97111fe201274
    Size: 367.31 kB