Red Hat Security Advisory: python3.12 security update
A moderate severity security vulnerability (CVE-2025-8291) affects Python 3.12 in Red Hat Enterprise Linux 9.6 Extended Update Support and related products. The issue involves the Python zipfile module where the End of Central Directory (EOCD) Locator record offset is not properly checked. This vulnerability has been addressed by Red Hat in updated python3.12 packages. Users of affected Red Hat Enterprise Linux 9.6 EUS and CodeReady Linux Builder 9.6 should apply the provided security update to remediate the issue.
AI Analysis
Technical Summary
CVE-2025-8291 is a vulnerability in the Python 3.12 zipfile module where the End of Central Directory (EOCD) Locator record offset is not checked. This flaw could allow malformed zip files to be processed incorrectly, potentially leading to security issues. Red Hat Product Security rated this vulnerability as moderate and released an update rebasing python3.12 to version 3.12.12 in Red Hat Enterprise Linux 9 and related variants. The advisory references Red Hat Security Advisory RHSA-2025:23323 and provides updated packages to fix the issue. No CVSS score is provided in the advisory, and no known exploits have been observed in the wild.
Potential Impact
The vulnerability affects the integrity of zipfile processing in Python 3.12, which could lead to unexpected behavior when handling specially crafted zip files. The exact impact is not detailed beyond the moderate severity rating. There are no known exploits in the wild, indicating limited or no active exploitation at this time.
Mitigation Recommendations
Red Hat has released an official security update rebasing python3.12 to version 3.12.12 that fixes this vulnerability. Users running affected versions of Red Hat Enterprise Linux 9 and related variants should apply the update as described in Red Hat advisory RHSA-2025:23323. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: python3.12 security update
Description
A moderate severity security vulnerability (CVE-2025-8291) affects Python 3.12 in Red Hat Enterprise Linux 9.6 Extended Update Support and related products. The issue involves the Python zipfile module where the End of Central Directory (EOCD) Locator record offset is not properly checked. This vulnerability has been addressed by Red Hat in updated python3.12 packages. Users of affected Red Hat Enterprise Linux 9.6 EUS and CodeReady Linux Builder 9.6 should apply the provided security update to remediate the issue.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-8291 is a vulnerability in the Python 3.12 zipfile module where the End of Central Directory (EOCD) Locator record offset is not checked. This flaw could allow malformed zip files to be processed incorrectly, potentially leading to security issues. Red Hat Product Security rated this vulnerability as moderate and released an update rebasing python3.12 to version 3.12.12 in Red Hat Enterprise Linux 9 and related variants. The advisory references Red Hat Security Advisory RHSA-2025:23323 and provides updated packages to fix the issue. No CVSS score is provided in the advisory, and no known exploits have been observed in the wild.
Potential Impact
The vulnerability affects the integrity of zipfile processing in Python 3.12, which could lead to unexpected behavior when handling specially crafted zip files. The exact impact is not detailed beyond the moderate severity rating. There are no known exploits in the wild, indicating limited or no active exploitation at this time.
Mitigation Recommendations
Red Hat has released an official security update rebasing python3.12 to version 3.12.12 that fixes this vulnerability. Users running affected versions of Red Hat Enterprise Linux 9 and related variants should apply the update as described in Red Hat advisory RHSA-2025:23323. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:0355
- Cve Count
- 1
Threat ID: 6a3da1cc4853345fc1822d0e
Added to database: 06/25/2026, 21:46:52 UTC
Last enriched: 07/07/2026, 13:25:42 UTC
Last updated: 09/10/2026, 19:36:52 UTC
Views: 22
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.