Red Hat Product Errata RHSA-2026:19549 - Security Advisory Issued: 2026-05-20 Updated: 2026-05-20 RHSA-2026:19549 - Security Advisory Overview Updated Packages Synopsis Important: python3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100) python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2457932 - CVE-2026-6100 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules BZ - 2458049 - CVE-2026-4786 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API CVEs CVE-2026-4786 CVE-2026-6100 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM python3-3.6.8-51.el8_8.15.src.rpm SHA-256: 0f1e4f0be77ce59ac3a56b5631bbd2fa1c94617a1e66a8a1dbcedbf03c68a4e8 x86_64 platform-python-3.6.8-51.el8_8.15.i686.rpm SHA-256: eacf87d8a86b5bba6a0c962f08873be55ff633a94e6b6841cff6307b33a7bb31 platform-python-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: b956fd11a3d075dfb9797a007bad2a275f6a02e2dc3b0529245ec1718e51e0a1 platform-python-debug-3.6.8-51.el8_8.15.i686.rpm SHA-256: 9878d8ba43bc8371f0607879f4ca1b55ba0490b6a8a640871a84afb790ccf911 platform-python-debug-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: d4caaf21757b8cd5c70508e14ef1cbf93a834b51f7bc60a24cef2a1172c3175f platform-python-devel-3.6.8-51.el8_8.15.i686.rpm SHA-256: bbb9a3cd9da0fabd3626f53c5cb46279e39126e36875a4f42fd6322f8e8e0174 platform-python-devel-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 3e1c346c0a80000c83da004c5cd1405c0b31cf20a1af66e1616864a08b8f19a4 python3-debuginfo-3.6.8-51.el8_8.15.i686.rpm SHA-256: 599667611d9bb69b89f6dc337a7aaf9f175e3036bc1f77d338d75ed9799da72f python3-debuginfo-3.6.8-51.el8_8.15.i686.rpm SHA-256: 599667611d9bb69b89f6dc337a7aaf9f175e3036bc1f77d338d75ed9799da72f python3-debuginfo-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 7cd6418260b9ac72086839e97deb6263cb0310e2075e199227ee631bc89033d1 python3-debuginfo-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 7cd6418260b9ac72086839e97deb6263cb0310e2075e199227ee631bc89033d1 python3-debugsource-3.6.8-51.el8_8.15.i686.rpm SHA-256: 7ff715ffad78ecde1fc85e7d4cd6cd23b07ad657f92c396b91de4ce1d2421339 python3-debugsource-3.6.8-51.el8_8.15.i686.rpm SHA-256: 7ff715ffad78ecde1fc85e7d4cd6cd23b07ad657f92c396b91de4ce1d2421339 python3-debugsource-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: d3eef664a39156de39bf5e85f320820ade6455b8aedc9b793227718d63b885c4 python3-debugsource-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: d3eef664a39156de39bf5e85f320820ade6455b8aedc9b793227718d63b885c4 python3-idle-3.6.8-51.el8_8.15.i686.rpm SHA-256: e738a75c3b9ebfb83b6508b47f81a990c44cc9a51f15faa9e6ef8a46928ec60b python3-idle-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 0c10f5a9733fa881fa5547b5a3780c62c58676d64f812903b8d8a110d9ae3a6d python3-libs-3.6.8-51.el8_8.15.i686.rpm SHA-256: 06aa0fb5f99e3c746fbf72b93abb1157b1466ee16445bb35486fffb446dd4679 python3-libs-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 65daafc5c898bdd2dbe0e1cf23a569b7b4751e4faa3c5e33dfbf3a5c80df60a0 python3-test-3.6.8-51.el8_8.15.i686.rpm SHA-256: cc22e86e316e0ecfcd181ffde1e5598d2ad7a22f5f35b917f55164a3e3e47b36 python3-test-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 6c32fd7ea80659a77fd0af48d5c6540d04c0779950e72ea761e4785f64d856cc python3-tkinter-3.6.8-51.el8_8.15.i686.rpm SHA-256: ccc1c8140af965d19cbfe0f2649ac18827a353bae10ec53b4c35983735adbd9d python3-tkinter-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: fc8326ea70f6b964dfabb15cddc1bd8326bb04364887d6ebcaf226dec908dfef Red Hat Enterprise Linux Server - TUS 8.8 SRPM python3-3.6.8-51.el8_8.15.src.rpm SHA-256: 0f1e4f0be77ce59ac3a56b5631bbd2fa1c94617a1e66a8a1dbcedbf03c68a4e8 x86_64 platform-python-3.6.8-51.el8_8.15.i686.rpm SHA-256: eacf87d8a86b5bba6a0c962f08873be55ff633a94e6b6841cff6307b33a7bb31 platform-python-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: b956fd11a3d075dfb9797a007bad2a275f6a02e2dc3b0529245ec1718e51e0a1 platform-python-debug-3.6.8-51.el8_8.15.i686.rpm SHA-256: 9878d8ba43bc8371f0607879f4ca1b55ba0490b6a8a640871a84afb790ccf911 platform-python-debug-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: d4caaf21757b8cd5c70508e14ef1cbf93a834b51f7bc60a24cef2a1172c3175f platform-python-devel-3.6.8-51.el8_8.15.i686.rpm SHA-256: bbb9a3cd9da0fabd3626f53c5cb46279e39126e36875a4f42fd6322f8e8e0174 platform-python-devel-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 3e1c346c0a80000c83da004c5cd1405c0b31cf20a1af66e1616864a08b8f19a4 python3-debuginfo-3.6.8-51.el8_8.15.i686.rpm SHA-256: 599667611d9bb69b89f6dc337a7aaf9f175e3036bc1f77d338d75ed9799da72f python3-debuginfo-3.6.8-51.el8_8.15.i686.rpm SHA-256: 599667611d9bb69b89f6dc337a7aaf9f175e3036bc1f77d338d75ed9799da72f python3-debuginfo-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 7cd6418260b9ac72086839e97deb6263cb0310e2075e199227ee631bc89033d1 python3-debuginfo-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 7cd6418260b9ac72086839e97deb6263cb0310e2075e199227ee631bc89033d1 python3-debugsource-3.6.8-51.el8_8.15.i686.rpm SHA-256: 7ff715ffad78ecde1fc85e7d4cd6cd23b07ad657f92c396b91de4ce1d2421339 python3-debugsource-3.6.8-51.el8_8.15.i686.rpm SHA-256: 7ff715ffad78ecde1fc85e7d4cd6cd23b07ad657f92c396b91de4ce1d2421339 python3-debugsource-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: d3eef664a39156de39bf5e85f320820ade6455b8aedc9b793227718d63b885c4 python3-debugsource-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: d3eef664a39156de39bf5e85f320820ade6455b8aedc9b793227718d63b885c4 python3-idle-3.6.8-51.el8_8.15.i686.rpm SHA-256: e738a75c3b9ebfb83b6508b47f81a990c44cc9a51f15faa9e6ef8a46928ec60b python3-idle-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 0c10f5a9733fa881fa5547b5a3780c62c58676d64f812903b8d8a110d9ae3a6d python3-libs-3.6.8-51.el8_8.15.i686.rpm SHA-256: 06aa0fb5f99e3c746fbf72b93abb1157b1466ee16445bb35486fffb446dd4679 python3-libs-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 65daafc5c898bdd2dbe0e1cf23a569b7b4751e4faa3c5e33dfbf3a5c80df60a0 python3-test-3.6.8-51.el8_8.15.i686.rpm SHA-256: cc22e86e316e0ecfcd181ffde1e5598d2ad7a22f5f35b917f55164a3e3e47b36 python3-test-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: 6c32fd7ea80659a77fd0af48d5c6540d04c0779950e72ea761e4785f64d856cc python3-tkinter-3.6.8-51.el8_8.15.i686.rpm SHA-256: ccc1c8140af965d19cbfe0f2649ac18827a353bae10ec53b4c35983735adbd9d python3-tkinter-3.6.8-51.el8_8.15.x86_64.rpm SHA-256: fc8326ea70f6b964dfabb15cddc1bd8326bb04364887d6ebcaf226dec908dfef Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM python3-3.6.8-51.el8_8.15.src.rpm SHA-256: 0f1e4f0be77ce59ac3a56b5631bbd2fa1c94617a1e66a8a1dbcedbf03c68a4e8 ppc64le platform-python-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 3c095315cfcb2424721bed3378accb21aba3250fd85bdbf7adf5fa7d7db16dc8 platform-python-debug-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: af65be4f23c909704da952e5bf947676c4392de140052405c6fffb15699d675c platform-python-devel-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 8059e0d113007d75ef1d08ade18051d72332501a8c9f36e17809775faa91c588 python3-debuginfo-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: c6240bc0af7452da4ac1cd21137c7205496641e2191f75f03ca11c498030953c python3-debuginfo-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: c6240bc0af7452da4ac1cd21137c7205496641e2191f75f03ca11c498030953c python3-debugsource-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 033bba488a60642719ada20a07c1b2f7410f5988ff58a80b334d7786c757859b python3-debugsource-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 033bba488a60642719ada20a07c1b2f7410f5988ff58a80b334d7786c757859b python3-idle-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 8e75f246955323dfac8eaeae3115d43c1d8fac2532c3fea4f3a81c995faab496 python3-libs-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: f32e28c89b7b41ffcbc92556f74a6adc8317e2c752263d2d4bdf36e46523cae7 python3-test-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 62dfc3ca29508e8f5150923c818936616545e6a80fdd0919c0f0071ab2311002 python3-tkinter-3.6.8-51.el8_8.15.ppc64le.rpm SHA-256: 2b0e0bba6b913d5234a89eaacaee7347aeab5965f10a4530671d5c3eca41ffa8 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM python3-3.6.8-51.el8_8.15.src.rpm SHA-256: 0f1e4f0be77ce59ac3a56b5631bbd2fa1c94617a1e66a8a1dbcedbf03c68a4e8 x86_64 platform-python-3.6.8-51.el8_8.15.i686.rpm SHA-256: eacf87d8a86b5bba6a0c962f08873be55ff633a94e6b6841cff6307b33a7bb31 platform-python-