VDB

RHSA-2025%3A15411

RHSA-2025%3A15411 PUBLISHED CVSS 7.099999904632568 HIGH

Record from OSV · Published September 8, 2025

Red Hat Security Advisory: python39:3.9 security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
python39-tkinterRed Hat:rhel_eus_long_life:8.4::appstream3.9.2-2.module, 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4
python39-wheel-wheelRed Hat:rhel_eus_long_life:8.4::appstream1:0.35.1-3.module+el8.4.0+15042+dc5a279b.1, 0.35.1-3.module
python39-debugsourceRed Hat:rhel_eus_long_life:8.4::appstream3.9.2-2.module, 0:3.9.2-2.module+el8.4.0+22379+dcc60181.4
python3x-sixRed Hat:rhel_eus_long_life:8.4::appstream1.15.0-3.module, 0:1.15.0-3.module+el8.4.0+9822+20bf1249
python39-sixRed Hat:rhel_eus_long_life:8.4::appstream1.15.0-3.module, 0:1.15.0-3.module+el8.4.0+9822+20bf1249
python39-psycopg2Red Hat:rhel_aus:8.4::appstream2.8.6-2.module, 0:2.8.6-2.module+el8.4.0+9822+20bf1249
python39-cryptography-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream3.3.1-2.module, 0:3.3.1-2.module+el8.4.0+9822+20bf1249
python-pycparserRed Hat:rhel_eus_long_life:8.4::appstream2.20-3.module, 0:2.20-3.module+el8.4.0+9822+20bf1249
python39-lxml-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream4.6.2-2.module, 0:4.6.2-2.module+el8.4.0+9822+20bf1249
python-lxml-debugsourceRed Hat:rhel_aus:8.4::appstream4.6.2-2.module, 0:4.6.2-2.module+el8.4.0+9822+20bf1249
python39-cffiRed Hat:rhel_eus_long_life:8.4::appstream1.14.3-2.module, 0:1.14.3-2.module+el8.4.0+9822+20bf1249
PyYAMLRed Hat:rhel_eus_long_life:8.4::appstream5.4.1-1.module, 0:5.4.1-1.module+el8.4.0+10484+27ce8e03

88 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Affected products

VendorProductVersions
Red Hat:rhel_eus_long_life:8.4::appstreampython39-tkinter0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-wheel-wheel0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-debugsource0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython3x-six0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-six0, 0
Red Hat:rhel_aus:8.4::appstreampython39-psycopg20, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-cryptography-debuginfo0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython-pycparser0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-lxml-debuginfo0, 0
Red Hat:rhel_aus:8.4::appstreampython-lxml-debugsource0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-cffi0, 0
Red Hat:rhel_eus_long_life:8.4::appstreamPyYAML0, 0
Red Hat:rhel_aus:8.4::appstreampython39-cffi0, 0
Red Hat:rhel_aus:8.4::appstreampython39-numpy-debuginfo0, 0
Red Hat:rhel_aus:8.4::appstreampython39-psycopg2-tests0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-idna0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython-psycopg2-debugsource0, 0
Red Hat:rhel_aus:8.4::appstreampython39-libs0, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-psycopg20, 0
Red Hat:rhel_eus_long_life:8.4::appstreampython39-pip0, 0

…and 132 more

Timeline

  • Sep 8, 2025 CVE Published
  • May 1, 2026 CVE Updated
  • May 1, 2026 Distribution Patch (2 in total, the first dated here)
  • May 1, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2025%3A15411
vulnetix vdb fixes RHSA-2025%3A15411

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2025%253A15411/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›