python3.12-3.12.12-1.el8_10
エラータID: AXSA:2026-013:01
リリース日:
2026/01/08 Thursday - 15:32
題名:
python3.12-3.12.12-1.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- Python には、リソースの制限を実施していない問題があるため、
リモートの攻撃者により、サービス拒否攻撃 (リソース枯渇) を
可能とする脆弱性が存在します。(CVE-2025-12084)
- Python の zipfile モジュールには、ZIP64 End of Central Directory
(EOCD) ロケータレコードのオフセット値の妥当性のチェック処理が欠落
しているため、リモートの攻撃者により、細工された ZIP 形式のアーカイブ
データの処理を介して、不正な ZIP アーカイブの作成を可能とする脆弱性が
存在します。(CVE-2025-8291)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-12084
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
CVE-2025-8291
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations. Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that are handled differently by the 'zipfile' module compared to other ZIP implementations. Remediation maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the expected value.
追加情報:
N/A
ダウンロード:
SRPMS
- python3.12-3.12.12-1.el8_10.src.rpm
MD5: a9fffb3c89e7eb9ffb57b54f7c5b2623
SHA-256: e9f1b821db704e7ed93e45d3734f9d8eed4c5f0165187dc4d2389c50c92dc873
Size: 19.90 MB
Asianux Server 8 for x86_64
- python3.12-3.12.12-1.el8_10.i686.rpm
MD5: 65f961c2c3f8611a13148f09a1029f37
SHA-256: dc97505e18dadf32bb80db644611efd54a208e51ffe13fcb3848d1e7df8d1afe
Size: 30.32 kB - python3.12-3.12.12-1.el8_10.x86_64.rpm
MD5: fd151dad831d9f66b8e94737cc14535b
SHA-256: 7e6f1b71f60e1ca724b306b1c4c3f55fe376b2e67fbb850939c0906d7f6b4c4d
Size: 30.23 kB - python3.12-debug-3.12.12-1.el8_10.i686.rpm
MD5: eed465e57a6b7a0b60064ca695947aeb
SHA-256: af11b159576de146ac47a856effae94f0210f1f49d7de5001dbf2c673b000481
Size: 3.50 MB - python3.12-debug-3.12.12-1.el8_10.x86_64.rpm
MD5: 7491e6dcfe4e7129aa7b7d25209edcd0
SHA-256: 8bcd6505e65f012f4ed6331e6492f55cdb12e70e149c4f4c15eafdafecf4ba1a
Size: 3.69 MB - python3.12-devel-3.12.12-1.el8_10.i686.rpm
MD5: 469398dc71e8b297391a3bf19c5975ea
SHA-256: 8e956ef728e06d2e0345ae29086f1866cae2050d9ffca7f7e40a1ce1f6f97081
Size: 291.33 kB - python3.12-devel-3.12.12-1.el8_10.x86_64.rpm
MD5: 457567ae61be81ce76c49fccd8ed3736
SHA-256: 3b9b8965be322866801e0179cc0fb8f9940f732f2ce6b2dc5a0984e8f0b2ddaa
Size: 291.25 kB - python3.12-idle-3.12.12-1.el8_10.i686.rpm
MD5: 16beef1b8324ef86643ae55817892560
SHA-256: 48bc70cac90579165d5d08047798105f3ed59b049dc87ac8d7babd8501039c29
Size: 1.29 MB - python3.12-idle-3.12.12-1.el8_10.x86_64.rpm
MD5: a468baae953818abcfbca01e15971282
SHA-256: 44065aab325060b99dcdc9a89819f28b623a873b15f19c01a6c5c898ed1dc330
Size: 1.29 MB - python3.12-libs-3.12.12-1.el8_10.i686.rpm
MD5: 3199cb817557721456bf624f7fbe2207
SHA-256: a4558810f5652d9f87857b808f129bc2836a89633658a1693900ecf63a69d1a0
Size: 10.10 MB - python3.12-libs-3.12.12-1.el8_10.x86_64.rpm
MD5: 7ae3db5d8e355dc9841b6015de4d4d9b
SHA-256: 4b4d886058a73217b71e406e1bbbf317ca5304020e87ade3855a167408146b0b
Size: 10.02 MB - python3.12-rpm-macros-3.12.12-1.el8_10.noarch.rpm
MD5: 0b7c11419b67ee48cffb3c913713f99a
SHA-256: 28cdafc19cb0df2132855b554a33005f3fa32f869a15f2be83ad79dbab9c8b27
Size: 16.65 kB - python3.12-test-3.12.12-1.el8_10.i686.rpm
MD5: d478e448dfab73036d23b155e455552b
SHA-256: ebf1fd8123126fef1fa3b596af50d8f3a2d61db9725aa58ccd7c907db5cd53ed
Size: 16.00 MB - python3.12-test-3.12.12-1.el8_10.x86_64.rpm
MD5: b90ba3eb091da4651e819c965f9fd010
SHA-256: 6f3100feae4f05661ab2fba1611ee6793e1179aa0edc508076de4849669198ca
Size: 15.99 MB - python3.12-tkinter-3.12.12-1.el8_10.i686.rpm
MD5: 7d9f97d0c97c3b16b255272fe8555da8
SHA-256: c65dfe25fd99e1365398532393f656265dbf6ab7ac64af15bedc077004d879b0
Size: 402.96 kB - python3.12-tkinter-3.12.12-1.el8_10.x86_64.rpm
MD5: 1573e23dfab64965ccf593355bdaefd3
SHA-256: e7390021e92dcbc6030786b34a0c3e6b19efff995c6c0c655ab7f7c5891e735d
Size: 401.79 kB
English