CVE-2025-15467 - libssl-3.dll - OpenSSL 3.0.13.0

[ket000]

Currently C:\Program Files\Cloudbase Solutions\Cloudbase-Init\Python\DLLs\libssl-3.dll version is OpenSSL 3.0.13.0. This is marked as vulnerable for CVE-2025-15467 and fix is to update to 3.0.19 or higher.

The vulnerability is rated as 9.8

https://nvd.nist.gov/vuln/detail/CVE-2025-15467

Please release a new version that addresses this vulnerability.

[ader1990]

Hello,

What tool did you use to confirm / find the vulnerable binary?

Would like to integrate it in the github workflows, if possible.

Thanks.

[ader1990]

The latest 3.13.12 release of Python Windows installers are from the Feb 3 2026, but the libssl-3.dll version is still 3.0.18. Will update here once a new version is released. See: https://www.python.org/downloads/release/python-31312/.

[ket000]

Tool : https://www.qualys.com/scanning-accuracy