Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Python 3.9 Security Update Exposes Unpatched Flaw
published 1 year ago
Summary
This update fixes a security issue in Python 3.9 that could allow an attacker to execute arbitrary code on a vulnerable system. The update is available for Red Hat Enterprise Linux users and is recommended to be installed to prevent potential security risks. Users should apply the update as soon as possible.
What to do
- Update redhat python-unversioned-command to version 0:3.9.21-2.el9_6.2.
- Update redhat python3-devel to version 0:3.9.21-2.el9_6.2.
- Update redhat python3-tkinter to version 0:3.9.21-2.el9_6.2.
- Update redhat python3.9-debuginfo to version 0:3.9.21-2.el9_6.2.
- Update redhat python3.9-debugsource to version 0:3.9.21-2.el9_6.2.
- Update redhat python3 to version 0:3.9.21-2.el9_6.2.
- Update redhat python3-libs to version 0:3.9.21-2.el9_6.2.
- Update redhat python3.9 to version 0:3.9.21-2.el9_6.2.
- Update redhat python3-debug to version 0:3.9.21-2.el9_6.2.
- Update redhat python3-idle to version 0:3.9.21-2.el9_6.2.
- Update redhat python3-test to version 0:3.9.21-2.el9_6.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | python-unversioned-command |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | python3-devel |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | python3-tkinter |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | python3.9-debuginfo |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::appstream | redhat | python3.9-debugsource |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::baseos | redhat | python3 |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::baseos | redhat | python3-libs |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::baseos | redhat | python3.9 |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::baseos | redhat | python3.9-debuginfo |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::baseos | redhat | python3.9-debugsource |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3 |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3-debug |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3-idle |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3-test |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3-tkinter |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3.9-debuginfo |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
| Red Hat:enterprise_linux:9::crb | redhat | python3.9-debugsource |
< 0:3.9.21-2.el9_6.2 Fix: upgrade to 0:3.9.21-2.el9_6.2
|
Original advisory text
Red Hat Security Advisory: python3.9 security update
References
- https://access.redhat.com/errata/RHSA-2025:15019 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2384043 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15019.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-8194 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-8194 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-8194 Vendor Advisory
- https://github.com/python/cpython/issues/130577 Third Party Advisory
- https://github.com/python/cpython/pull/137027 Third Party Advisory
- https://mail.python.org/archives/list/[email protected]/thread/ZULLF3... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published2 Sep 2025
Updated28 Jul 2026
First seen28 Jul 2026
Sources
RHSA-2025:15019 · OSV
Track software like this
Free during beta