Skip to content

Fix for openssl CVE-2025-15467 vulnerability with Python installer #144775

Closed as duplicate

Description

@jvisu

Bug report

Bug description:

We use Python Windows installer 3.13 which has openssl 3.0.18 (https://www.python.org/ftp/python/3.13.12/python-3.13.12-amd64.exe). We see openssl vulnerability CVE-2025-15467 reported on openssl 3.0.18.

Let us know if there is any latest version of Python which has openssl version which is not CVE-2025-15467 vulnerable.
If yes, please provide the Python version details.
If no, let us know do you have any plan about the fix.

Let me know if you need any other details or if I posted in wrong group.

Thanks in advance

Regards
J. Visu

CPython versions tested on:

3.13

Operating systems tested on:

Windows

Activity

  1. added
    type-bugAn unexpected behavior, bug, or error
    on Feb 13, 2026
  2. StanFromIreland commented on Feb 13, 2026

    @StanFromIreland
    Member

    We are planning to update them soon, see #144551.

  3. jvisu commented on Feb 13, 2026

    @jvisu
    Author

    Thanks for the quick update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    type-bugAn unexpected behavior, bug, or error

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions