vulnerability
Amazon Linux 2023: CVE-2025-8291: Medium priority package update for python3.12 (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Oct 7, 2025 | Oct 28, 2025 | Oct 28, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Oct 7, 2025
Added
Oct 28, 2025
Modified
Oct 28, 2025
Description
The 'zipfile' module would not check the validity of the ZIP64 End of
Central Directory (EOCD) Locator record offset value would not be used to
locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be
assumed to be the previous record in the ZIP archive. This could be abused
to create ZIP archives that are handled differently by the 'zipfile' module
compared to other ZIP implementations.
Remediation maintains this behavior, but checks that the offset specified
in the ZIP64 EOCD Locator record matches the expected value.
Central Directory (EOCD) Locator record offset value would not be used to
locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be
assumed to be the previous record in the ZIP archive. This could be abused
to create ZIP archives that are handled differently by the 'zipfile' module
compared to other ZIP implementations.
Remediation maintains this behavior, but checks that the offset specified
in the ZIP64 EOCD Locator record matches the expected value.
Solutions
amazon-linux-2023-upgrade-python3amazon-linux-2023-upgrade-python3-11amazon-linux-2023-upgrade-python3-11-debugamazon-linux-2023-upgrade-python3-11-debuginfoamazon-linux-2023-upgrade-python3-11-debugsourceamazon-linux-2023-upgrade-python3-11-develamazon-linux-2023-upgrade-python3-11-idleamazon-linux-2023-upgrade-python3-11-libsamazon-linux-2023-upgrade-python3-11-testamazon-linux-2023-upgrade-python3-11-tkinteramazon-linux-2023-upgrade-python3-12amazon-linux-2023-upgrade-python3-12-debugamazon-linux-2023-upgrade-python3-12-debuginfoamazon-linux-2023-upgrade-python3-12-debugsourceamazon-linux-2023-upgrade-python3-12-develamazon-linux-2023-upgrade-python3-12-idleamazon-linux-2023-upgrade-python3-12-libsamazon-linux-2023-upgrade-python3-12-testamazon-linux-2023-upgrade-python3-12-tkinteramazon-linux-2023-upgrade-python3-13amazon-linux-2023-upgrade-python3-13-debugamazon-linux-2023-upgrade-python3-13-debuginfoamazon-linux-2023-upgrade-python3-13-debugsourceamazon-linux-2023-upgrade-python3-13-develamazon-linux-2023-upgrade-python3-13-freethreadingamazon-linux-2023-upgrade-python3-13-freethreading-debugamazon-linux-2023-upgrade-python3-13-idleamazon-linux-2023-upgrade-python3-13-libsamazon-linux-2023-upgrade-python3-13-testamazon-linux-2023-upgrade-python3-13-tkinteramazon-linux-2023-upgrade-python3-9-debuginfoamazon-linux-2023-upgrade-python3-9-debugsourceamazon-linux-2023-upgrade-python3-debugamazon-linux-2023-upgrade-python3-develamazon-linux-2023-upgrade-python3-idleamazon-linux-2023-upgrade-python3-libsamazon-linux-2023-upgrade-python3-testamazon-linux-2023-upgrade-python3-tkinteramazon-linux-2023-upgrade-python-unversioned-command
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.