Moderate Vulnerability in Python 3.12: Security Update Required
Summary
ALSA-2026:1408: Moderate: python3.12 security update. Affects python3.12 versions < 3.12.12-4.el9_7. Fixed in 3.12.12-4.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python 3.12 is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, and dynamic data types. It is widely used for various applications, including web development, data analysis, artificial intelligence, and more. The language's flexibility and extensive libraries make it a popular choice among developers. However, recent security vulnerabilities have been identified that could potentially lead to denial of service attacks, necessitating immediate attention from users and administrators.
Vulnerability Detail
The identified vulnerabilities in Python 3.12 include an excessive read buffering denial of service (DoS) in the http.client module (CVE-2025-13836) and a quadratic algorithm issue in the xml.dom.minidom module that could also lead to denial of service (CVE-2025-12084). These vulnerabilities can be exploited by attackers to cause significant disruptions in service, making it critical for users to address them promptly.
How To Fix
Minimum fixed version
3.12.12-4.el9_7
This is the first release that contains the fix.
sudo dnf update python3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for these vulnerabilities. The best course of action is to apply the security update as soon as it becomes available.
Conclusion
The vulnerabilities in Python 3.12 pose a moderate risk that could lead to denial of service attacks. Users are strongly encouraged to update to the latest patched version to ensure the security and stability of their applications. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for python3.12 →
FAQ
The main vulnerabilities include excessive read buffering DoS in http.client and a quadratic algorithm in xml.dom.minidom that can lead to denial of service.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground at Vulert Scanner without needing to sign up.
These vulnerabilities can lead to denial of service, causing disruptions in service and potentially impacting users and applications relying on Python 3.12.
Yes, a patch is available in version 3.12.12-4.el9_7. Users should update to this version to mitigate the vulnerabilities.
If immediate updating is not possible, monitor your systems closely for unusual activity and consider implementing network-level protections to mitigate potential attacks.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12.
