Skip to content
OpenAdvisories
Critical RHSA-2026:52400 1 CVE

Red Hat Security Advisory: python3 security update

Published Aug 10, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 python3 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-debug 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-debuginfo 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-devel 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-idle 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-libs 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-test 0:3.6.8-21.el7_9.7
Red Hat · RHEL 7 ELS rhel_els:7 python3-tkinter 0:3.6.8-21.el7_9.7

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-6100

    Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

    Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under …

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2457932
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52400.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-6100
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6100
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6100
  • article
    https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d
  • article
    https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2
  • article
    https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20
  • article
    https://github.com/python/cpython/issues/148395
  • article
    https://github.com/python/cpython/pull/148396
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/