Critical Security Update for Python Packages: Red Hat Advisory RHSA-2025:10140
Summary
RHSA-2025:10140: Red Hat Security Advisory: python3.12 security update. Affects python-unversioned-command versions < 0:3.12.9-2.el10_0.2. Fixed in 0:3.12.9-2.el10_0.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected packages are part of the Python 3.12 ecosystem, which is widely used for developing applications and scripts in various environments. Python provides a versatile programming language with extensive libraries and frameworks, making it a staple in software development. The vulnerability identified in these packages could potentially expose systems to security risks, necessitating immediate attention from users and administrators.
Vulnerability Detail
The vulnerability arises from a security flaw in Python 3.12 and its associated packages, which could allow unauthorized access or manipulation of data. This issue is particularly concerning as it affects multiple components of the Python ecosystem, including the core interpreter and libraries. The ramifications of this vulnerability could include data breaches, unauthorized code execution, and compromised system integrity, making it critical for users to apply the necessary updates.
How To Fix
Minimum fixed version
0:3.12.9-2.el10_0.2
This is the first release that contains the fix.
sudo dnf update python-unversioned-commandTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected Python packages or limit their usage until the update is applied. Additionally, implementing strict access controls and monitoring can help mitigate potential risks while waiting for the official patch.
Conclusion
The identified vulnerability in Python 3.12 and its related packages poses significant security risks that require immediate action. Users are strongly advised to update their packages to the latest patched version to safeguard their systems. Utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities, ensuring better security practices.
See every vulnerability recorded for python-unversioned-command →
FAQ
The CVSS score of this vulnerability is 7.6, indicating a high severity level.
The affected packages include python-unversioned-command, python3, python3-debug, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter, python3.12, python3.12-debuginfo, and python3.12-debugsource.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider implementing strict access controls and monitoring to mitigate risks until the update can be applied.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:10140.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-unversioned-command.
