Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python-unversioned-command | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python3-devel | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python3-tkinter | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python3.9-debuginfo | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | python3.9-debugsource | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3 | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3-libs | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3.9 | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3.9-debuginfo | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | python3.9-debugsource | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3 | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3-debug | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3-idle | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3-test | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3-tkinter | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3.9-debuginfo | 0:3.9.25-16.el9_9 |
| Red Hat · RHEL 9 enterprise_linux:9::crb | python3.9-debugsource | 0:3.9.25-16.el9_9 |
Vulnerabilities 2
-
Critical 9.4
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configur…
-
Low 2.0
Lenient parsing of integers for response body and chunk framing
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2560301
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98533.json
-
report
https://access.redhat.com/security/cve/CVE-2026-103995
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2562522
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-103995
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-103995
-
article
https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae
-
article
https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d
-
article
https://github.com/python/cpython/issues/150751
-
article
https://github.com/python/cpython/pull/150752
-
report
https://access.redhat.com/security/cve/CVE-2026-115557
-
article
https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-115557
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-115557
-
article
https://emudhra.we-have-a-problem.com/
-
article
https://github.com/python/cpython/issues/160040
-
article
https://github.com/python/cpython/pull/160042
-
article
https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/