RHSA-2025:19427 | Vulnetix

RHSA-2025:19427 PUBLISHED CVSS 7.099999904632568 HIGH

A flaw was found in the Python tarfile module. Processing a specially crafted tar archive, specifically an archive with negative offsets, can cause an infinite loop and deadlock. This issue results in a denial of service in the Python application using the tarfile module.

Risk Scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Affected Products

Vendor	Product	Versions
Red Hat	registry.redhat.io/rhelai1/bootc-amd-rhel9@sha256:c029b66a3354ee6fd186a1f05aff31b5834e611b9d5b326b65b16829d6b98d1f_amd64 as a component of Red Hat Enterprise Linux AI 1.5	*

Timeline

Nov 3, 2025 CVE Published
Aug 16, 2026 CVE Updated
Aug 16, 2026 Distribution Patch
Aug 16, 2026 Distribution Patch
Aug 16, 2026 Security Advisory
Aug 16, 2026 Security Advisory
Aug 16, 2026 Security Advisory
Aug 16, 2026 Security Advisory
Aug 16, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2025:19427 advisory
https://access.redhat.com/security/cve/CVE-2025-47273 advisory
https://access.redhat.com/security/cve/CVE-2025-48956 advisory
https://access.redhat.com/security/cve/CVE-2025-57809 advisory
https://access.redhat.com/security/cve/CVE-2025-8194 advisory
https://access.redhat.com/security/updates/classification/ advisory
https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19427.json advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2384043 issue
https://www.cve.org/CVERecord?id=CVE-2025-8194 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8194 advisory
https://github.com/python/cpython/issues/130577 advisory
https://github.com/python/cpython/pull/137027 advisory
https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/ advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2366982 issue
https://www.cve.org/CVERecord?id=CVE-2025-47273 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-47273 advisory
https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88 advisory
https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b advisory
https://github.com/pypa/setuptools/issues/4946 advisory

…and 12 more

Open in Interactive Console →