Red Hat Product Errata RHSA-2026:10711 - Security Advisory Issued: 2026-04-27 Updated: 2026-04-27 RHSA-2026:10711 - Security Advisory Overview Updated Packages Synopsis Important: python3.12 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3.12 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Fixes BZ - 2457932 - CVE-2026-6100 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules BZ - 2458049 - CVE-2026-4786 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API CVEs CVE-2026-4786 CVE-2026-6100 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM python3.12-3.12.12-3.el10_1.3.src.rpm SHA-256: e0ceb888fdd46d9dcbf2d3623d6edd92c7463eec2f5d0f8f9b02434e292d4d00 x86_64 python-unversioned-command-3.12.12-3.el10_1.3.noarch.rpm SHA-256: 93ed2e9aa778b0de48b93f73dfe95002e92d2e5ad15dcebd365eb7c2ab4fd826 python3-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 56e856f6cfee1c79e977b64af8482bbb98634613d398dca2613c2bf83a82ba97 python3-devel-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 396e969249006ad341360593e05b060ab6628ab317071ce3aa2d8efec6b5ebcf python3-libs-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 80bd81132d618b914c96a1b7398a0fc80dc0705daa71e0281fc31740f68b33a6 python3-tkinter-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: f919c5538a6d2dca00fc569f10d2d00621dda3ea7a1fd1430243ac82564947bd python3.12-debuginfo-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 637a7f4130ce22da8ab1bb1b2a9a951c3db6220d850d08776bb6a33db70e0b2b python3.12-debuginfo-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 637a7f4130ce22da8ab1bb1b2a9a951c3db6220d850d08776bb6a33db70e0b2b python3.12-debugsource-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 1abecc37cd108bd919bab828a802645906065886718ae592e0ada9b8c39bb1c5 python3.12-debugsource-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 1abecc37cd108bd919bab828a802645906065886718ae592e0ada9b8c39bb1c5 Red Hat Enterprise Linux for IBM z Systems 10 SRPM python3.12-3.12.12-3.el10_1.3.src.rpm SHA-256: e0ceb888fdd46d9dcbf2d3623d6edd92c7463eec2f5d0f8f9b02434e292d4d00 s390x python-unversioned-command-3.12.12-3.el10_1.3.noarch.rpm SHA-256: 93ed2e9aa778b0de48b93f73dfe95002e92d2e5ad15dcebd365eb7c2ab4fd826 python3-3.12.12-3.el10_1.3.s390x.rpm SHA-256: 7367a79f764b253c8fe46c9fe5ec5d2e835f778a5e8dd656887cb01ee84eff2f python3-devel-3.12.12-3.el10_1.3.s390x.rpm SHA-256: c5cbd3057b397444f81d589e2a0c0a1f496826cea588ba581a215e0383374a6b python3-libs-3.12.12-3.el10_1.3.s390x.rpm SHA-256: 4fb67bd950f401b75c7c32257ecd5e291b4b7d20dfceff55385d5f6f6305ed1f python3-tkinter-3.12.12-3.el10_1.3.s390x.rpm SHA-256: 981a5eb89717d4263dac333f59e1ae8bb127f5686afc330cad89ea447ebc6d75 python3.12-debuginfo-3.12.12-3.el10_1.3.s390x.rpm SHA-256: 043cf2b5a1245a0ec8e82111c9381692aa8e647a7f0459dfd896de89780d0b26 python3.12-debuginfo-3.12.12-3.el10_1.3.s390x.rpm SHA-256: 043cf2b5a1245a0ec8e82111c9381692aa8e647a7f0459dfd896de89780d0b26 python3.12-debugsource-3.12.12-3.el10_1.3.s390x.rpm SHA-256: f8e3015effa9d10f6b6a506af4272b932cd7b8c2ea9e6b0d79f76ce92f55316b python3.12-debugsource-3.12.12-3.el10_1.3.s390x.rpm SHA-256: f8e3015effa9d10f6b6a506af4272b932cd7b8c2ea9e6b0d79f76ce92f55316b Red Hat Enterprise Linux for Power, little endian 10 SRPM python3.12-3.12.12-3.el10_1.3.src.rpm SHA-256: e0ceb888fdd46d9dcbf2d3623d6edd92c7463eec2f5d0f8f9b02434e292d4d00 ppc64le python-unversioned-command-3.12.12-3.el10_1.3.noarch.rpm SHA-256: 93ed2e9aa778b0de48b93f73dfe95002e92d2e5ad15dcebd365eb7c2ab4fd826 python3-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 9633c54e1cda6dbed72a0aca6a0f8063f6044da3dc12a3902f4deb90ec3b40fd python3-devel-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 9101e302469172334de7cb03cbb227246396524fb41f2a65d8f2a6644740885d python3-libs-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 4007d3dc35227ad465c56644fd24d2bd6ed7c766cb152557db94498f3dbf0202 python3-tkinter-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 7b6ade4d2729b63ae7df8411e81a488329333aeeecf5a7fd7373616c8e7f84eb python3.12-debuginfo-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 385eb76336dbd5179322732e52adbb1df1ac2d19818b1d84a0c4f26c775269ce python3.12-debuginfo-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 385eb76336dbd5179322732e52adbb1df1ac2d19818b1d84a0c4f26c775269ce python3.12-debugsource-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 7a3f20d2a120cf334c2add0e4c3d18850ac7c986ffcbe1190d2e7c5000227282 python3.12-debugsource-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 7a3f20d2a120cf334c2add0e4c3d18850ac7c986ffcbe1190d2e7c5000227282 Red Hat Enterprise Linux for ARM 64 10 SRPM python3.12-3.12.12-3.el10_1.3.src.rpm SHA-256: e0ceb888fdd46d9dcbf2d3623d6edd92c7463eec2f5d0f8f9b02434e292d4d00 aarch64 python-unversioned-command-3.12.12-3.el10_1.3.noarch.rpm SHA-256: 93ed2e9aa778b0de48b93f73dfe95002e92d2e5ad15dcebd365eb7c2ab4fd826 python3-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: 88f3ea6bfa6f068d3d6a12b204a54b26d508dd6cba61c5ab07af96c6246c6eb3 python3-devel-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: 011c752fa0bf15af980c8a6d3b15d273e62447221d1c9e409a40390e70aff1ec python3-libs-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: 76b55ebd99e0b1a0d6807f752bbfe82b49c2e2c94c7dada96b23573c52c6ca76 python3-tkinter-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: fb62672edff4e993c1d3bc0e8c6c792d6dac6c7662ae835118ec805ad0e64d63 python3.12-debuginfo-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: e18a89160a202f68edf8a6f701a78f5f366d48fa0eb8904cdd331c6176756396 python3.12-debuginfo-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: e18a89160a202f68edf8a6f701a78f5f366d48fa0eb8904cdd331c6176756396 python3.12-debugsource-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: e4280b0a7b2d310a5ea9461a9bdfe28912560add7b780772906d27b07146ff41 python3.12-debugsource-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: e4280b0a7b2d310a5ea9461a9bdfe28912560add7b780772906d27b07146ff41 Red Hat CodeReady Linux Builder for x86_64 10 SRPM x86_64 python3-debug-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 7feefa8a5a7fe0dc4306abab8489aa3eccce3eb20d845d87e0c934a9182cddac python3-idle-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 9a2ed849726c3464ae4bf281234bdd81284d44e4980f8be933ee112b8e277f0a python3-test-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 01904f37385b7b2630fe9076a0887b8a742bf48fd97e17ceb1cb1fe872be86d5 python3.12-debuginfo-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 637a7f4130ce22da8ab1bb1b2a9a951c3db6220d850d08776bb6a33db70e0b2b python3.12-debugsource-3.12.12-3.el10_1.3.x86_64.rpm SHA-256: 1abecc37cd108bd919bab828a802645906065886718ae592e0ada9b8c39bb1c5 Red Hat CodeReady Linux Builder for Power, little endian 10 SRPM ppc64le python3-debug-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 62f38179b69b05c3aa0e1cf6931db46b0e5f670d3016275cc61cd901bfa60753 python3-idle-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: a6f2d6fdee856f3dac40d27c1838e2ffd11009a7e647be2caf0ac8e766ad04d3 python3-test-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 91565e0d01cf3eb8c8d8b734c91444861c3c73a4eebdb70f9062a470848fa3fa python3.12-debuginfo-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 385eb76336dbd5179322732e52adbb1df1ac2d19818b1d84a0c4f26c775269ce python3.12-debugsource-3.12.12-3.el10_1.3.ppc64le.rpm SHA-256: 7a3f20d2a120cf334c2add0e4c3d18850ac7c986ffcbe1190d2e7c5000227282 Red Hat CodeReady Linux Builder for ARM 64 10 SRPM aarch64 python3-debug-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: 808d56b870fec6970b326e12ca8ccd6070d1a1ebce3d5238aec6e5eb858e98ae python3-idle-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: 3cbcc2d40d42e768cec80c21f1690fdc96acc7fda3ac5fccef2b194f1b34d64b python3-test-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: 183f393000cc8114aaea6666d327cc0ae633e03f42afe69cf6e8387ac2fe11e4 python3.12-debuginfo-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: e18a89160a202f68edf8a6f701a78f5f366d48fa0eb8904cdd331c6176756396 python3.12-debugsource-3.12.12-3.el10_1.3.aarch64.rpm SHA-256: e4280b0a7b2d310a5ea9461a9bdfe28912560add7b780772906d27b07146ff41 Red Hat CodeReady Linux Builder for IBM z Systems 10 SRPM s390x python3-debug-3.12.12-3.el10_1.3.s390x.rpm SHA-256: e94703687f8203cc901e9fd2659dea0c4036777704df3966ca05f84909d8eff6 python3-idle-3.12.12-3.el10_1.3.s390x.rpm SHA-256: 463859f60d3d94db4bf7fbbd416e046a573aa632ed8dbe41405c94c72fdc9c86 python3-test-3.12.12-3.el10_1.3.s390x.rpm SHA