Red Hat Product Errata RHSA-2026:21682 - Security Advisory Issued: 2026-05-28 Updated: 2026-05-28 RHSA-2026:21682 - Security Advisory Overview Updated Packages Synopsis Important: python3.9 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3.9 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64 Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2457932 - CVE-2026-6100 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules BZ - 2458049 - CVE-2026-4786 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API CVEs CVE-2026-4786 CVE-2026-6100 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 SRPM python3.9-3.9.18-3.el9_4.13.src.rpm SHA-256: e779568dbd49565dbf087bd2e39d3946effa63e3a61dc2df694c271fcfe4dc29 x86_64 python-unversioned-command-3.9.18-3.el9_4.13.noarch.rpm SHA-256: a16f1505536d0db5c4bdded520190335dbcd97b7b3f218e6df5ef76c5bffd452 python3-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: a67e01b385c5505ebd2633426f02869a73780569db7996909cb965268330b5a2 python3-devel-3.9.18-3.el9_4.13.i686.rpm SHA-256: 69e7dcdcf3e963ba0dd981d2fe110873aa141f1ee181bb80f91d468ffb9938dd python3-devel-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 7a5ff15c8e7b64cb2dc63137fda11317e7e066c1e52b6e4c0423b50646e4e0df python3-libs-3.9.18-3.el9_4.13.i686.rpm SHA-256: 16a8a915211d9ec81aa1a11f05585e6b3fa507b49716a0b5f6311810e401e112 python3-libs-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: b858d2efaff45fcf857f2923e663e7c73e38c5655b505efc61b13c7cb70ea6ec python3-tkinter-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 97ebe82a68cfc7c161b42ed8de1055063ae22399916edd45f8fe2f68717ce6fa python3.9-debuginfo-3.9.18-3.el9_4.13.i686.rpm SHA-256: 185e501e6240b9e815ae3b091fe13d0204191f79ec075f83ccc22a394a2e5727 python3.9-debuginfo-3.9.18-3.el9_4.13.i686.rpm SHA-256: 185e501e6240b9e815ae3b091fe13d0204191f79ec075f83ccc22a394a2e5727 python3.9-debuginfo-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 9f7dffebbed40fa7a9dcfd2026c10bccd11d30c6231b8f92d7f2933c39976df2 python3.9-debuginfo-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 9f7dffebbed40fa7a9dcfd2026c10bccd11d30c6231b8f92d7f2933c39976df2 python3.9-debugsource-3.9.18-3.el9_4.13.i686.rpm SHA-256: 8c98c9730d2d335bc7d6528fdfea2085d6e13bca68f09829fac3feb0e6b1a248 python3.9-debugsource-3.9.18-3.el9_4.13.i686.rpm SHA-256: 8c98c9730d2d335bc7d6528fdfea2085d6e13bca68f09829fac3feb0e6b1a248 python3.9-debugsource-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 88526614b38522999910d1517fde628bbb75e61f4e5e484315e6f0c2f6c7948c python3.9-debugsource-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 88526614b38522999910d1517fde628bbb75e61f4e5e484315e6f0c2f6c7948c Red Hat Enterprise Linux Server - AUS 9.4 SRPM python3.9-3.9.18-3.el9_4.13.src.rpm SHA-256: e779568dbd49565dbf087bd2e39d3946effa63e3a61dc2df694c271fcfe4dc29 x86_64 python-unversioned-command-3.9.18-3.el9_4.13.noarch.rpm SHA-256: a16f1505536d0db5c4bdded520190335dbcd97b7b3f218e6df5ef76c5bffd452 python3-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: a67e01b385c5505ebd2633426f02869a73780569db7996909cb965268330b5a2 python3-devel-3.9.18-3.el9_4.13.i686.rpm SHA-256: 69e7dcdcf3e963ba0dd981d2fe110873aa141f1ee181bb80f91d468ffb9938dd python3-devel-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 7a5ff15c8e7b64cb2dc63137fda11317e7e066c1e52b6e4c0423b50646e4e0df python3-libs-3.9.18-3.el9_4.13.i686.rpm SHA-256: 16a8a915211d9ec81aa1a11f05585e6b3fa507b49716a0b5f6311810e401e112 python3-libs-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: b858d2efaff45fcf857f2923e663e7c73e38c5655b505efc61b13c7cb70ea6ec python3-tkinter-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 97ebe82a68cfc7c161b42ed8de1055063ae22399916edd45f8fe2f68717ce6fa python3.9-debuginfo-3.9.18-3.el9_4.13.i686.rpm SHA-256: 185e501e6240b9e815ae3b091fe13d0204191f79ec075f83ccc22a394a2e5727 python3.9-debuginfo-3.9.18-3.el9_4.13.i686.rpm SHA-256: 185e501e6240b9e815ae3b091fe13d0204191f79ec075f83ccc22a394a2e5727 python3.9-debuginfo-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 9f7dffebbed40fa7a9dcfd2026c10bccd11d30c6231b8f92d7f2933c39976df2 python3.9-debuginfo-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 9f7dffebbed40fa7a9dcfd2026c10bccd11d30c6231b8f92d7f2933c39976df2 python3.9-debugsource-3.9.18-3.el9_4.13.i686.rpm SHA-256: 8c98c9730d2d335bc7d6528fdfea2085d6e13bca68f09829fac3feb0e6b1a248 python3.9-debugsource-3.9.18-3.el9_4.13.i686.rpm SHA-256: 8c98c9730d2d335bc7d6528fdfea2085d6e13bca68f09829fac3feb0e6b1a248 python3.9-debugsource-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 88526614b38522999910d1517fde628bbb75e61f4e5e484315e6f0c2f6c7948c python3.9-debugsource-3.9.18-3.el9_4.13.x86_64.rpm SHA-256: 88526614b38522999910d1517fde628bbb75e61f4e5e484315e6f0c2f6c7948c Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 SRPM python3.9-3.9.18-3.el9_4.13.src.rpm SHA-256: e779568dbd49565dbf087bd2e39d3946effa63e3a61dc2df694c271fcfe4dc29 s390x python-unversioned-command-3.9.18-3.el9_4.13.noarch.rpm SHA-256: a16f1505536d0db5c4bdded520190335dbcd97b7b3f218e6df5ef76c5bffd452 python3-3.9.18-3.el9_4.13.s390x.rpm SHA-256: cfc76857175e09a563a4fd91c4325910b56c4699a59bdd7f33ed9ff8b829fb97 python3-devel-3.9.18-3.el9_4.13.s390x.rpm SHA-256: 89268032b7e6d5081e7250edc92b33af2e152f16866c9c1fc1938656f771bb84 python3-libs-3.9.18-3.el9_4.13.s390x.rpm SHA-256: ac29c550de994dac2c2aa7c1a3dae5a5ae1d8b593480474bc41f9ea1fd3dcefb python3-tkinter-3.9.18-3.el9_4.13.s390x.rpm SHA-256: af834ce7b4d9a00791602f6a2cdb762c5aabb429825b12f8b2eb9aa38602ea11 python3.9-debuginfo-3.9.18-3.el9_4.13.s390x.rpm SHA-256: 48753b0dac0b9090d3ded6ed4f2a9d004f85c036e7fea31345919175f70c3cb5 python3.9-debuginfo-3.9.18-3.el9_4.13.s390x.rpm SHA-256: 48753b0dac0b9090d3ded6ed4f2a9d004f85c036e7fea31345919175f70c3cb5 python3.9-debugsource-3.9.18-3.el9_4.13.s390x.rpm SHA-256: 00cff635c1e4a195fb26f278f8295121d862337e2cd062ffe27a9022dc0dc0ac python3.9-debugsource-3.9.18-3.el9_4.13.s390x.rpm SHA-256: 00cff635c1e4a195fb26f278f8295121d862337e2cd062ffe27a9022dc0dc0ac Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 SRPM python3.9-3.9.18-3.el9_4.13.src.rpm SHA-256: e779568dbd49565dbf087bd2e39d3946effa63e3a61dc2df694c271fcfe4dc29 ppc64le python-unversioned-command-3.9.18-3.el9_4.13.noarch.rpm SHA-256: a16f1505536d0db5c4bdded520190335dbcd97b7b3f218e6df5ef76c5bffd452 python3-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: 962182a10398ab952619865d302cd47f30f414a27e1d2f5490202d274e3c9010 python3-devel-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: 5306af5f2d41a56a7181fc2507a60449e113d9ea166c322e50afb8e98a46c0cd python3-libs-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: 038694b333de19ccbd49cdd188002aa7e78470be24c84c3cedc2596845d21f8c python3-tkinter-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: 082ea778c438e1456fbe7d8ea14ddf26cd352ee52f6b55a7ceb545cc6b044272 python3.9-debuginfo-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: 8b599baa04904d1201021fccc7bc4e9c4c29e05b2abcaf494cccaecab0e863a0 python3.9-debuginfo-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: 8b599baa04904d1201021fccc7bc4e9c4c29e05b2abcaf494cccaecab0e863a0 python3.9-debugsource-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: ee13928094313478116d06ab0b5ad9cf962881ddf5b3713d8c35a47d7a3eb30d python3.9-debugsource-3.9.18-3.el9_4.13.ppc64le.rpm SHA-256: ee13928094313478116d06ab0b5ad9cf962881ddf5b3713d8c35a47