Critical Security Update for Python 3.12: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:1408: Red Hat Security Advisory: python3.12 security update. Affects python3.12 versions < 0:3.12.12-4.el9_7. Fixed in 0:3.12.12-4.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python 3.12 is a widely used programming language known for its simplicity and versatility, making it a popular choice for developers across various domains. It provides extensive libraries and frameworks that facilitate rapid application development. However, like any software, it is susceptible to vulnerabilities that can compromise its security and functionality. This advisory addresses critical vulnerabilities identified in Python 3.12, which could potentially affect applications relying on this version.
Vulnerability Detail
The vulnerabilities identified in Python 3.12, cataloged under CVE-2025-12084 and CVE-2025-13836, stem from flaws in the language's core libraries and runtime environment. These vulnerabilities could allow attackers to exploit weaknesses, leading to unauthorized access, data corruption, or denial of service. The potential ramifications include severe impacts on application integrity and security, making it imperative for users to address these vulnerabilities promptly.
How To Fix
Minimum fixed version
0:3.12.12-4.el9_7
This is the first release that contains the fix.
sudo dnf update python3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the exposure of their applications by restricting access to sensitive functionalities or by running applications in a controlled environment until the update is applied. However, the best course of action is to apply the patch as soon as possible.
Conclusion
The vulnerabilities in Python 3.12 pose significant risks to applications relying on this version. It is crucial for users to update to the patched version 3.12.12-4.el9_7 to mitigate these risks. Utilizing tools like Vulert can further enhance security by monitoring for vulnerabilities in real-time.
See every vulnerability recorded for python3.12 →
FAQ
The advisory addresses vulnerabilities identified as CVE-2025-12084 and CVE-2025-13836, which affect the core libraries and runtime of Python 3.12.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to access the code.
The CVSS score for the vulnerabilities in Python 3.12 is 7.5, indicating a high severity level.
Yes, you can limit access to sensitive functionalities or run your applications in a controlled environment as a temporary workaround until the patch is applied.
Detailed information can be found in the Red Hat Security Advisory and the CVE entries for the vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12.
