Critical Security Update for python-kdcproxy: Addressing Vulnerabilities CVE-2025-59088 and CVE-2025-59089
Summary
RHSA-2025:21806: Red Hat Security Advisory: python-kdcproxy security update. Affects python-kdcproxy versions < 0:1.0.0-7.el9_0.1. Fixed in 0:1.0.0-7.el9_0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python-kdcproxy is a package designed to provide a proxy service for Kerberos authentication, facilitating secure access to services in a networked environment. It is particularly useful in enterprise settings where Kerberos is used for secure authentication. However, recent vulnerabilities have been identified that could potentially compromise the security of systems utilizing this package.
Vulnerability Detail
The vulnerabilities identified as CVE-2025-59088 and CVE-2025-59089 stem from flaws in the authentication handling of python-kdcproxy. These vulnerabilities could allow unauthorized access to sensitive information, leading to potential data breaches or unauthorized actions within the network. The vulnerabilities are classified with a CVSS score of 8.6, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:1.0.0-7.el9_0.1
This is the first release that contains the fix.
sudo dnf update python-kdcproxyTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the affected services until the update can be applied. This can be done by modifying firewall rules or access control lists to limit exposure.
Conclusion
The vulnerabilities in python-kdcproxy pose a significant risk to systems relying on this package for Kerberos authentication. Immediate action is required to update to the patched version to mitigate potential security threats. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for python-kdcproxy →
FAQ
These are identifiers for specific vulnerabilities found in the python-kdcproxy package that could lead to unauthorized access.
The vulnerabilities have a CVSS score of 8.6, indicating a high level of severity that requires prompt action.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
Consider implementing temporary workarounds such as restricting access to the affected services until the update can be applied.
Detailed information can be found in the Red Hat Security Advisory and on the Vulert platform.
Related vulnerabilities
Recent vulnerabilities recorded for python-kdcproxy.
