Red Hat Product Errata RHSA-2026:28581 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-24 RHSA-2026:28581 - Security Advisory Overview Updated Packages Synopsis Important: python3.14 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3.14 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module (CVE-2026-6019) Bug Fix(es) and Enhancement(s): [10.2.z]Update python3.14 to 3.14.5 for the incremental GC changes (JIRA:RHEL-176147) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2458049 - CVE-2026-4786 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API BZ - 2460869 - CVE-2026-6019 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module CVEs CVE-2026-4786 CVE-2026-6019 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 x86_64 python3.14-3.14.5-1.el10_2.x86_64.rpm SHA-256: 2688029f1c83da9569bf531c099fa93fe33a64e3f0e515cb6af0257cf0e962e7 python3.14-debuginfo-3.14.5-1.el10_2.x86_64.rpm SHA-256: a3d654e159a2d2bf2ad2ac7dd4b4ffc3bc0fab557e74843e472a086d304daee6 python3.14-debugsource-3.14.5-1.el10_2.x86_64.rpm SHA-256: d9abee558ecbfda6b397e62b0f880095d2ca0399f2e43f3904a5bcd0435f1bc3 python3.14-devel-3.14.5-1.el10_2.x86_64.rpm SHA-256: 3f0cf83b036adc135371d54024e49e57db54af5ce5673cafb4d0c264cca3747f python3.14-libs-3.14.5-1.el10_2.x86_64.rpm SHA-256: 10312c66edc1bee96f1f129f4798be98533caab97ca6ced2187c6deb0d642295 python3.14-tkinter-3.14.5-1.el10_2.x86_64.rpm SHA-256: d9043eee3152b24cbd5142753ee03f17bb3bcd0beaba4fa39a98561c11f55435 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 x86_64 python3.14-3.14.5-1.el10_2.x86_64.rpm SHA-256: 2688029f1c83da9569bf531c099fa93fe33a64e3f0e515cb6af0257cf0e962e7 python3.14-debuginfo-3.14.5-1.el10_2.x86_64.rpm SHA-256: a3d654e159a2d2bf2ad2ac7dd4b4ffc3bc0fab557e74843e472a086d304daee6 python3.14-debugsource-3.14.5-1.el10_2.x86_64.rpm SHA-256: d9abee558ecbfda6b397e62b0f880095d2ca0399f2e43f3904a5bcd0435f1bc3 python3.14-devel-3.14.5-1.el10_2.x86_64.rpm SHA-256: 3f0cf83b036adc135371d54024e49e57db54af5ce5673cafb4d0c264cca3747f python3.14-libs-3.14.5-1.el10_2.x86_64.rpm SHA-256: 10312c66edc1bee96f1f129f4798be98533caab97ca6ced2187c6deb0d642295 python3.14-tkinter-3.14.5-1.el10_2.x86_64.rpm SHA-256: d9043eee3152b24cbd5142753ee03f17bb3bcd0beaba4fa39a98561c11f55435 Red Hat Enterprise Linux for IBM z Systems 10 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 s390x python3.14-3.14.5-1.el10_2.s390x.rpm SHA-256: 0a25be49cace22348fc699b4928c0ebc4ac354d6237846dff06f23a2ffdbf6aa python3.14-debuginfo-3.14.5-1.el10_2.s390x.rpm SHA-256: aec7c3ee438fed2fc136a9a3f2cd8583d5f037b271a5585be2147b555049b287 python3.14-debugsource-3.14.5-1.el10_2.s390x.rpm SHA-256: ee1a7a03d4286a5bcfe94889cb3ff78b969066b2e7cb4a78e80f4bad878d4f43 python3.14-devel-3.14.5-1.el10_2.s390x.rpm SHA-256: f865a0296815b4cc599fa1b43d2770aebeaf3524a2b0bc0a38a82c81b8349332 python3.14-libs-3.14.5-1.el10_2.s390x.rpm SHA-256: 52fa01efbd91e28cee086abf2285d354fc82eda79bd86f8689082de510f7f9bc python3.14-tkinter-3.14.5-1.el10_2.s390x.rpm SHA-256: c5ac52d6e42fd641288014964282be41c660433a638e010d56676ab18b26a016 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 s390x python3.14-3.14.5-1.el10_2.s390x.rpm SHA-256: 0a25be49cace22348fc699b4928c0ebc4ac354d6237846dff06f23a2ffdbf6aa python3.14-debuginfo-3.14.5-1.el10_2.s390x.rpm SHA-256: aec7c3ee438fed2fc136a9a3f2cd8583d5f037b271a5585be2147b555049b287 python3.14-debugsource-3.14.5-1.el10_2.s390x.rpm SHA-256: ee1a7a03d4286a5bcfe94889cb3ff78b969066b2e7cb4a78e80f4bad878d4f43 python3.14-devel-3.14.5-1.el10_2.s390x.rpm SHA-256: f865a0296815b4cc599fa1b43d2770aebeaf3524a2b0bc0a38a82c81b8349332 python3.14-libs-3.14.5-1.el10_2.s390x.rpm SHA-256: 52fa01efbd91e28cee086abf2285d354fc82eda79bd86f8689082de510f7f9bc python3.14-tkinter-3.14.5-1.el10_2.s390x.rpm SHA-256: c5ac52d6e42fd641288014964282be41c660433a638e010d56676ab18b26a016 Red Hat Enterprise Linux for Power, little endian 10 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 ppc64le python3.14-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 6ff81030066e474eb88893783a78e24ef7736d66e727f146e216f40af7e3ccc8 python3.14-debuginfo-3.14.5-1.el10_2.ppc64le.rpm SHA-256: ac48279bc75448b9e2d5cfb77f5c6f259f51acb24ad8edf50ed4ad88aa5719f1 python3.14-debugsource-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 96d88b3df343014e45de2b49a5c9359eaeaf725a5479bdd278eb415fc222ff20 python3.14-devel-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 392889225f97055a472a5c7cb003b8ef2e3937a3279fab484511b15e18026397 python3.14-libs-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 7db445b82f5914b4d1c579f8adc53cdd5f9d7d5e61a537e55013f24419b3d412 python3.14-tkinter-3.14.5-1.el10_2.ppc64le.rpm SHA-256: e90e9febb5935b09ba11329bf2996be77c6096a16654cb8e525bff57deaec81f Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 ppc64le python3.14-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 6ff81030066e474eb88893783a78e24ef7736d66e727f146e216f40af7e3ccc8 python3.14-debuginfo-3.14.5-1.el10_2.ppc64le.rpm SHA-256: ac48279bc75448b9e2d5cfb77f5c6f259f51acb24ad8edf50ed4ad88aa5719f1 python3.14-debugsource-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 96d88b3df343014e45de2b49a5c9359eaeaf725a5479bdd278eb415fc222ff20 python3.14-devel-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 392889225f97055a472a5c7cb003b8ef2e3937a3279fab484511b15e18026397 python3.14-libs-3.14.5-1.el10_2.ppc64le.rpm SHA-256: 7db445b82f5914b4d1c579f8adc53cdd5f9d7d5e61a537e55013f24419b3d412 python3.14-tkinter-3.14.5-1.el10_2.ppc64le.rpm SHA-256: e90e9febb5935b09ba11329bf2996be77c6096a16654cb8e525bff57deaec81f Red Hat Enterprise Linux for ARM 64 10 SRPM python3.14-3.14.5-1.el10_2.src.rpm SHA-256: 2102ea391c3135bb7339b7893f9c3e0ae3db7c390754aed42d77ec3b494af2a5 aarch64 python3.14-3.14.5-1.el10_2.aarch64.rpm SHA-256: 96edd51d16c69be79225838fbe4d2422869dc2c44e55e328a1deecfddbaeae55 python3.14-debuginfo-3.14.5-1.el10_2.aarch64.rpm SHA-256: 2a239f1204adcce9ad721229913ecb5b9f097185af4108372803a640638bbcab python3.14-debugsource-3.14.5-1.el10_2.aarch64.rpm SHA-256: 9cbf8d023317425b5cd21cb2094125101856ac6903e610e714b29ceedbada5b9 python3.14-devel-3.14.5-1.el10_2.aarch64.rpm SHA-256: 50d16c60d6ce616d5a800266349e6cafd6c5c4cacd5c49a2d9756e38ad8ef4c1 python3.14-libs-3.14.5-1.el10_2.aarch64.rpm SHA-256: cea3ebd0483114bbba7ac62b9273839a87fb5c5f