Red Hat Security AdvisoryRHSA-2025:23342
python3.9 security update
Released 2025-12-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.25-2.el9_7, python3-devel-3.9.25-2.el9_7, python3-tkinter-3.9.25-2.el9_7
- Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.25-2.el9_7, python3-libs-3.9.25-2.el9_7, python3.9-3.9.25-2.el9_7
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3-3.9.25-2.el9_7, python3-debug-3.9.25-2.el9_7, python3-idle-3.9.25-2.el9_7 +2
Fixes 4 records
Priority MEDIUM 53
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00466 · Published 2025-10-07 · Partial fix · 3.9.24, 3.10.19 +4 CWE-1285
Priority LOW 30
CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00744 · Published 2024-06-27 · Partial fix · 3.9.24, 3.10.0b1
Priority LOW 21
The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00603 · Published 2025-06-17 · Partial fix · 3.9.24, 3.10.19 +4 CWE-1333
Priority LOW 9
If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
CVSS 4.0LOW 1.8· Local · High privileges · No interaction · EPSS 0.00149 · Published 2025-10-31 · Partial fix · 3.9.25, 3.10.20 +5 CWE-400
THREATIST.IORead the docs