python3.11-3.11.13-4.el8_10

エラータID: AXSA:2026-103:03

リリース日: 
2026/01/30 Friday - 17:00
題名: 
python3.11-3.11.13-4.el8_10
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- Python には、リソースの制限を実施していない問題があるため、
リモートの攻撃者により、サービス拒否攻撃 (リソース枯渇) を可能
とする脆弱性が存在します。(CVE-2025-12084)

- Python の http.client モジュールには、リソースの制限を実施
していない問題があるため、リモートの攻撃者により、サービス拒否攻撃
(リソース枯渇) を可能とする脆弱性が存在します。(CVE-2025-13836)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2025-12084
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
CVE-2025-13836
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. python3.11-3.11.13-4.el8_10.src.rpm
    MD5: b9b46dabc538cb5d449d5327befba00d
    SHA-256: 0cafa5068ee0a3d29852ac3736a259ebee25b79cb120d8b64568c2e4e529c63e
    Size: 19.26 MB

Asianux Server 8 for x86_64
  1. python3.11-3.11.13-4.el8_10.i686.rpm
    MD5: a3d51d5b484de05ef1813cdf2c54a340
    SHA-256: f0ca4ed9307a32b056dc1ba523580df38c63c73056f9b07400de5368f45c77a9
    Size: 30.89 kB
  2. python3.11-3.11.13-4.el8_10.x86_64.rpm
    MD5: d9571149134724027873f7b46a286fe2
    SHA-256: f3d59ec64b06fad3da57b31c49001e7b0a9213cd4e9ec52652fe88de93dcae3e
    Size: 30.81 kB
  3. python3.11-debug-3.11.13-4.el8_10.i686.rpm
    MD5: cc84ad3866817f2fa930a42264c3a282
    SHA-256: ed55ba6261d93b38101aa4b47161f82b167db788cf44729feee0c6faadf90fb8
    Size: 3.20 MB
  4. python3.11-debug-3.11.13-4.el8_10.x86_64.rpm
    MD5: d768313bb38b522ebd6bad41236e3cad
    SHA-256: 19688747ec862b3c89796bab4313c476cc79c1c4fa1903dc06f5ea3e8440fd7e
    Size: 3.33 MB
  5. python3.11-devel-3.11.13-4.el8_10.i686.rpm
    MD5: 6294ce1179fbec8ebaf14676cc6f96e3
    SHA-256: fcad889e9bfe199919409d97bcd9e3f944a0e660b1ca3230b311f1d90b82c78b
    Size: 248.92 kB
  6. python3.11-devel-3.11.13-4.el8_10.x86_64.rpm
    MD5: f5d9241fb2639fd6e3aad520adedaf28
    SHA-256: fc919e7303f790206aba1db083c96e2e0f8bec4f1590348abad4e1c8ab13914d
    Size: 248.89 kB
  7. python3.11-idle-3.11.13-4.el8_10.i686.rpm
    MD5: 46e3f05d8f632da7b754960e5399cd64
    SHA-256: 24411db7642c3f16324291aaf6a10dc3b7b26c70d8a7e0d768393d9474ba0d93
    Size: 1.32 MB
  8. python3.11-idle-3.11.13-4.el8_10.x86_64.rpm
    MD5: 7ea3d02d5c7b10db1ccd967973224435
    SHA-256: 77fe87f2c8bfcb2bbc67ac703b5dd4bc4beb97da230632940a3a938ddbdf3c90
    Size: 1.32 MB
  9. python3.11-libs-3.11.13-4.el8_10.i686.rpm
    MD5: fbb71fa3d5bcc52261386cfdd721c152
    SHA-256: 9dbf0ae8d8f3f5197ffa58b1a646e5435d96310fad4f4cb70175d90b5c0cd46d
    Size: 10.50 MB
  10. python3.11-libs-3.11.13-4.el8_10.x86_64.rpm
    MD5: 40d6125cb9ea311c783d43b0ef24004c
    SHA-256: 09416fbcb66b60db2f1a6934dd571bcfb76a1a073520ac2178e40143d25202d7
    Size: 10.40 MB
  11. python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm
    MD5: f6bdba155a5e9fdfb5752afffddcc42f
    SHA-256: 987d0b686b49f74b179520b6e0a618e62839c6272b53640a9ba3b860b18956aa
    Size: 15.26 kB
  12. python3.11-test-3.11.13-4.el8_10.i686.rpm
    MD5: 62e6f77e10b4776361c1137a9d6fe453
    SHA-256: dd5caaa224fd285ee40b01d9a9a6d952e9b881d40a1460411c3b118778ed8dfd
    Size: 15.76 MB
  13. python3.11-test-3.11.13-4.el8_10.x86_64.rpm
    MD5: 07eb49cbddabdcdd40f7e558947024f9
    SHA-256: 201fab0ad2af93fb771dc458a10d1768dfaf1eec0410f5ed2c3b54aed35ebb47
    Size: 15.76 MB
  14. python3.11-tkinter-3.11.13-4.el8_10.i686.rpm
    MD5: 0993f2201276b5185311b64e967b1abe
    SHA-256: 496cb7759f436e77a560935c5a2feb0623393e05ce39c2d90bb3a8b63c648cb9
    Size: 411.08 kB
  15. python3.11-tkinter-3.11.13-4.el8_10.x86_64.rpm
    MD5: e3b59c171321ede8417d55e8ba602dbd
    SHA-256: b9c5502715f8a3b485f7960e416534d54764f4f16fc80e79af5902cf9675723d
    Size: 409.57 kB