Moderate Vulnerability in python3.12-cryptography: Security Update Required
Summary
ALSA-2025:7317: Moderate: python3.12-cryptography security update. Affects python3.12-cryptography versions < 41.0.7-2.el9. Fixed in 41.0.7-2.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python is a widely-used interpreted programming language known for its simplicity and versatility. The python3.12-cryptography package provides cryptographic recipes and primitives to Python developers. This package is crucial for implementing secure communications and data protection in applications. However, it is susceptible to vulnerabilities that may compromise the security of applications relying on it.
Vulnerability Detail
The vulnerability arises from a use-after-free issue in the rust-openssl library, specifically in the ssl::select_next_proto function. This flaw (CVE-2025-24898) can lead to potential exploitation, allowing attackers to execute arbitrary code or cause a denial of service. The implications of this vulnerability are significant, as it can undermine the integrity and confidentiality of data processed by applications using this library.
How To Fix
Minimum fixed version
41.0.7-2.el9
This is the first release that contains the fix.
sudo dnf update python3.12-cryptographyTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the security update as soon as it is available.
Conclusion
The python3.12-cryptography package has a moderate vulnerability that requires immediate attention. By updating to the latest patched version, users can protect their applications from potential exploitation. Regular monitoring and updates are essential for maintaining software security.
See every vulnerability recorded for python3.12-cryptography →
FAQ
The CVE associated with this vulnerability is CVE-2025-24898.
Exploitation of this vulnerability may lead to arbitrary code execution or denial of service, compromising application security.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Currently, there are no specific workarounds. The recommended action is to update the package as soon as the patch is available.
It is advisable to regularly check for updates to your packages, ideally on a weekly basis, to ensure that you are protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12-cryptography.
