Skip to content
OpenAdvisories
Medium RHSA-2026:0355 1 CVE

Red Hat Security Advisory: python3.12 security update

Published Jan 14, 2026 · Updated Jul 7, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream python3.12 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream python3.12-debuginfo 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream python3.12-debugsource 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream python3.12-devel 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream python3.12-libs 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream python3.12-tkinter 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12-debug 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12-debuginfo 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12-debugsource 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12-idle 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12-test 0:3.12.9-1.el9_6.3
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::crb python3.12-tkinter 0:3.12.9-1.el9_6.3

Vulnerabilities 1

  • Medium 4.3
    CVE-2025-8291

    ZIP64 End of Central Directory (EOCD) Locator record offset not checked

    The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed to be the previous record in the ZIP a…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2402342
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0355.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-8291
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-8291
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-8291
  • article
    https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267
  • article
    https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6
  • article
    https://github.com/python/cpython/issues/139700
  • article
    https://github.com/python/cpython/pull/139702
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/