Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Python 3.11 Security Update Exposes Sensitive Data

published 1 year ago

Summary

A security update for Python 3.11 has been released by Red Hat to address a vulnerability that could allow an attacker to access sensitive information. This affects systems running Python 3.11, which is widely used in various applications. To protect your system, apply the latest security update as soon as possible.

What to do

Update redhat python3.11 to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-debuginfo to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-debugsource to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-devel to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-libs to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-tkinter to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-debug to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-idle to version 0:3.11.7-1.el9_4.9.
Update redhat python3.11-test to version 0:3.11.7-1.el9_4.9.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_eus:9.4::appstream	redhat	python3.11	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::appstream	redhat	python3.11-debuginfo	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::appstream	redhat	python3.11-debugsource	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::appstream	redhat	python3.11-devel	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::appstream	redhat	python3.11-libs	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::appstream	redhat	python3.11-tkinter	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11-debug	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11-debuginfo	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11-debugsource	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11-idle	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11-test	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9
Red Hat:rhel_eus:9.4::crb	redhat	python3.11-tkinter	< 0:3.11.7-1.el9_4.9 Fix: upgrade to 0:3.11.7-1.el9_4.9

Original advisory text

Red Hat Security Advisory: python3.11 security update

References

https://access.redhat.com/errata/RHSA-2025:16016 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2384043 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16016.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-8194 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8194 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8194 Vendor Advisory
https://github.com/python/cpython/issues/130577 Third Party Advisory
https://github.com/python/cpython/pull/137027 Third Party Advisory
https://mail.python.org/archives/list/[email protected]/thread/ZULLF3... Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published17 Sep 2025

Updated28 Jul 2026

First seen28 Jul 2026

Sources

RHSA-2025:16016 · OSV

Track software like this

Free during beta