Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 279 articles for you...
217
security advisorybug fiximportantOracle Linux 9 Python3.9 Important Bug Fix ELSA-2026-39798 CVE-2026-15308
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-39798 http://linux.oracle.com/errata/ELSA-2026-39798.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: python-unversioned-command-3.9.25-7.0.1.el9_8.2.noarch.rpm python3-3.9.25-7.0.1.el9_8.2.i686.rpm python3-3.9.25-7.0.1.el9_8.2.x86_64.rpm python3-debug-3.9.25-7.0.1.el9_8.2.i686.rpm python3-debug-3.9.25-7.0.1.el9_8.2.x86_64.rpm python3-devel-3.9.25-7.0.1.el9_8.2.i686.rpm python3-devel-3.9.25-7.0.1.el9_8.2.x86_64.rpm python3-idle-3.9.25-7.0.1.el9_8.2.i686.rpm python3-idle-3.9.25-7.0.1.el9_8.2.x86_64.rpm python3-libs-3.9.25-7.0.1.el9_8.2.i686.rpm python3-libs-3.9.25-7.0.1.el9_8.2.x86_64.rpm python3-test-3.9.25-7.0.1.el9_8.2.i686.rpm python3-test-3.9.25-7.0.1.el9_8.2.x86_64.rpm python3-tkinter-3.9.25-7.0.1.el9_8.2.i686.rpm python3-tkinter-3.9.25-7.0.1.el9_8.2.x86_64.rpm aarch64: python-unversioned-command-3.9.25-7.0.1.el9_8.2.noarch.rpm python3-3.9.25-7.0.1.el9_8.2.aarch64.rpm python3-debug-3.9.25-7.0.1.el9_8.2.aarch64.rpm python3-devel-3.9.25-7.0.1.el9_8.2.aarch64.rpm python3-idle-3.9.25-7.0.1.el9_8.2.aarch64.rpm python3-libs-3.9.25-7.0.1.el9_8.2.aarch64.rpm python3-test-3.9.25-7.0.1.el9_8.2.aarch64.rpm python3-tkinter-3.9.25-7.0.1.el9_8.2.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/python3.9-3.9.25-7.0.1.el9_8.2.src.rpm Related CVEs: CVE-2026-15308 Description of changes: [3.9.25-7.0.1.el9_8.2] - Remove upstream URL reference [3.9.25-7.2] - Security fix for CVE-2026-15308 Resolves: RHEL-193786 [3.9.25-7.1] - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
217
security advisoryremote accessimportantOracle Linux Python 3.12 Important Security Advisory ELSA-2026-39771
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-39771 http://linux.oracle.com/errata/ELSA-2026-39771.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: python3.12-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-3.12.13-3.0.1.el9_8.1.x86_64.rpm python3.12-debug-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-debug-3.12.13-3.0.1.el9_8.1.x86_64.rpm python3.12-devel-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-devel-3.12.13-3.0.1.el9_8.1.x86_64.rpm python3.12-idle-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-idle-3.12.13-3.0.1.el9_8.1.x86_64.rpm python3.12-libs-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-libs-3.12.13-3.0.1.el9_8.1.x86_64.rpm python3.12-test-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-test-3.12.13-3.0.1.el9_8.1.x86_64.rpm python3.12-tkinter-3.12.13-3.0.1.el9_8.1.i686.rpm python3.12-tkinter-3.12.13-3.0.1.el9_8.1.x86_64.rpm aarch64: python3.12-3.12.13-3.0.1.el9_8.1.aarch64.rpm python3.12-debug-3.12.13-3.0.1.el9_8.1.aarch64.rpm python3.12-devel-3.12.13-3.0.1.el9_8.1.aarch64.rpm python3.12-idle-3.12.13-3.0.1.el9_8.1.aarch64.rpm python3.12-libs-3.12.13-3.0.1.el9_8.1.aarch64.rpm python3.12-test-3.12.13-3.0.1.el9_8.1.aarch64.rpm python3.12-tkinter-3.12.13-3.0.1.el9_8.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/python3.12-3.12.13-3.0.1.el9_8.1.src.rpm Related CVEs: CVE-2026-15308 Description of changes: [3.12.13-3.0.1.el9_8.1] - Remove upstream URL reference [3.12.13-3.1] - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
217
security advisorysecurity fiximportantOracle 8 Python3.12 Important ELSA-2026-39893 CVE-2026-15308 Security Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-39893 http://linux.oracle.com/errata/ELSA-2026-39893.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: python3.12-3.12.13-3.el8_10.i686.rpm python3.12-3.12.13-3.el8_10.x86_64.rpm python3.12-debug-3.12.13-3.el8_10.i686.rpm python3.12-debug-3.12.13-3.el8_10.x86_64.rpm python3.12-devel-3.12.13-3.el8_10.i686.rpm python3.12-devel-3.12.13-3.el8_10.x86_64.rpm python3.12-idle-3.12.13-3.el8_10.i686.rpm python3.12-idle-3.12.13-3.el8_10.x86_64.rpm python3.12-libs-3.12.13-3.el8_10.i686.rpm python3.12-libs-3.12.13-3.el8_10.x86_64.rpm python3.12-rpm-macros-3.12.13-3.el8_10.noarch.rpm python3.12-test-3.12.13-3.el8_10.i686.rpm python3.12-test-3.12.13-3.el8_10.x86_64.rpm python3.12-tkinter-3.12.13-3.el8_10.i686.rpm python3.12-tkinter-3.12.13-3.el8_10.x86_64.rpm aarch64: python3.12-3.12.13-3.el8_10.aarch64.rpm python3.12-debug-3.12.13-3.el8_10.aarch64.rpm python3.12-devel-3.12.13-3.el8_10.aarch64.rpm python3.12-idle-3.12.13-3.el8_10.aarch64.rpm python3.12-libs-3.12.13-3.el8_10.aarch64.rpm python3.12-rpm-macros-3.12.13-3.el8_10.noarch.rpm python3.12-test-3.12.13-3.el8_10.aarch64.rpm python3.12-tkinter-3.12.13-3.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/python3.12-3.12.13-3.el8_10.src.rpm Related CVEs: CVE-2026-15308 Description of changes: [3.12.13-3] - Security fix for CVE-2026-15308 Resolves: RHEL-193776 _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
217
security advisorysecurity issueupdateOracle Linux 8 ELSA-2026-39320 Python3 Important Security Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-39320 http://linux.oracle.com/errata/ELSA-2026-39320.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: platform-python-3.6.8-77.0.1.el8_10.i686.rpm platform-python-3.6.8-77.0.1.el8_10.x86_64.rpm platform-python-debug-3.6.8-77.0.1.el8_10.i686.rpm platform-python-debug-3.6.8-77.0.1.el8_10.x86_64.rpm platform-python-devel-3.6.8-77.0.1.el8_10.i686.rpm platform-python-devel-3.6.8-77.0.1.el8_10.x86_64.rpm python3-idle-3.6.8-77.0.1.el8_10.i686.rpm python3-idle-3.6.8-77.0.1.el8_10.x86_64.rpm python3-libs-3.6.8-77.0.1.el8_10.i686.rpm python3-libs-3.6.8-77.0.1.el8_10.x86_64.rpm python3-test-3.6.8-77.0.1.el8_10.i686.rpm python3-test-3.6.8-77.0.1.el8_10.x86_64.rpm python3-tkinter-3.6.8-77.0.1.el8_10.i686.rpm python3-tkinter-3.6.8-77.0.1.el8_10.x86_64.rpm aarch64: platform-python-3.6.8-77.0.1.el8_10.aarch64.rpm platform-python-debug-3.6.8-77.0.1.el8_10.aarch64.rpm platform-python-devel-3.6.8-77.0.1.el8_10.aarch64.rpm python3-idle-3.6.8-77.0.1.el8_10.aarch64.rpm python3-libs-3.6.8-77.0.1.el8_10.aarch64.rpm python3-test-3.6.8-77.0.1.el8_10.aarch64.rpm python3-tkinter-3.6.8-77.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/python3-3.6.8-77.0.1.el8_10.src.rpm Related CVEs: CVE-2026-15308 Description of changes: [3.6.8-77.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-77] - Security fix for CVE-2026-15308 Resolves: RHEL-193772 _______________________________________________ El-errata mailing list
Jul 17, 2026
•Important
Oracle
219
security advisorydenial of servicebug fixRocky Linux 9 python3.9 Important Denial of Service Fix RLSA-2026-39798
Important: python3.9 security, bug fix, and enhancement update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:39798", "synopsis": "Important: python3.9 security, bug fix, and enhancement update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for python3.9.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)\n\nBug Fix(es) and Enhancement(s):\n\n* python3.9 test_ssl fails ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192) [rhel-9.8.z] (JIRA:Rocky Linux-194207)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2498608", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608", "description": ""}], "cves": [{"name": "CVE-2026-15308", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-835"}], "references": [], "publishedAt": "2026-07-16T12:03:41.048961Z", "rpms": {"Rocky Linux 9": {"nvras": ["python3-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-0:3.9.25-7.el9_8.2.i686.rpm", "python3-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-0:3.9.25-7.el9_8.2.s390x.rpm","python3-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3.9-0:3.9.25-7.el9_8.2.src.rpm", "python3.9-debuginfo-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3.9-debuginfo-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3.9-debuginfo-0:3.9.25-7.el9_8.2.s390x.rpm", "python3.9-debuginfo-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3.9-debugsource-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3.9-debugsource-0:3.9.25-7.el9_8.2.i686.rpm", "python3.9-debugsource-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3.9-debugsource-0:3.9.25-7.el9_8.2.s390x.rpm", "python3.9-debugsource-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3-debug-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-debug-0:3.9.25-7.el9_8.2.i686.rpm", "python3-debug-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-debug-0:3.9.25-7.el9_8.2.s390x.rpm", "python3-debug-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3-devel-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-devel-0:3.9.25-7.el9_8.2.i686.rpm", "python3-devel-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-devel-0:3.9.25-7.el9_8.2.s390x.rpm", "python3-devel-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3-idle-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-idle-0:3.9.25-7.el9_8.2.i686.rpm", "python3-idle-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-idle-0:3.9.25-7.el9_8.2.s390x.rpm", "python3-idle-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3-libs-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-libs-0:3.9.25-7.el9_8.2.i686.rpm", "python3-libs-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-libs-0:3.9.25-7.el9_8.2.s390x.rpm", "python3-libs-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3-test-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-test-0:3.9.25-7.el9_8.2.i686.rpm", "python3-test-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-test-0:3.9.25-7.el9_8.2.s390x.rpm", "python3-test-0:3.9.25-7.el9_8.2.x86_64.rpm", "python3-tkinter-0:3.9.25-7.el9_8.2.aarch64.rpm", "python3-tkinter-0:3.9.25-7.el9_8.2.i686.rpm", "python3-tkinter-0:3.9.25-7.el9_8.2.ppc64le.rpm", "python3-tkinter-0:3.9.25-7.el9_8.2.s390x.rpm", "python3-tkinter-0:3.9.25-7.el9_8.2.x86_64.rpm", "python-unversioned-command-0:3.9.25-7.el9_8.2.noarch.rpm"]}},"rebootSuggested": false, "buildReferences": []}. Rocky Linux 9 python3.9 important security update fixes a Denial of Service risk and enhances performance.. Rocky Linux python3 security update important bug fix. . Severity: Important. LinuxSecurity.com Team
Jul 16, 2026
•Important
Rocky Linux
219
security advisoryimportantpythonRocky Linux python3.12 Important CPU Denial of Service RLSA-2026-39183
Important: python3.12 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:39183", "synopsis": "Important: python3.12 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for python3.12.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2498608", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608", "description": ""}], "cves": [{"name": "CVE-2026-15308", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15308", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-835"}], "references": [], "publishedAt": "2026-07-15T12:06:01.640959Z", "rpms": {"Rocky Linux 10": {"nvras": ["python3-test-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3-devel-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3-libs-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3-debug-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3-devel-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-test-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3-idle-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3.12-debugsource-0:3.12.13-2.el10_2.1.s390x.rpm","python3-libs-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-debug-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-test-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3.12-debugsource-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3-libs-0:3.12.13-2.el10_2.1.s390x.rpm", "python3.12-debuginfo-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-tkinter-0:3.12.13-2.el10_2.1.s390x.rpm", "python3.12-debuginfo-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3-0:3.12.13-2.el10_2.1.s390x.rpm", "python3-idle-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3-devel-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3-idle-0:3.12.13-2.el10_2.1.s390x.rpm", "python3-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-idle-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3-test-0:3.12.13-2.el10_2.1.s390x.rpm", "python-unversioned-command-0:3.12.13-2.el10_2.1.noarch.rpm", "python3-tkinter-0:3.12.13-2.el10_2.1.ppc64le.rpm", "python3.12-debuginfo-0:3.12.13-2.el10_2.1.s390x.rpm", "python3-libs-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3.12-0:3.12.13-2.el10_2.1.src.rpm", "python3-debug-0:3.12.13-2.el10_2.1.s390x.rpm", "python3-tkinter-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-devel-0:3.12.13-2.el10_2.1.s390x.rpm", "python3.12-debugsource-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3-debug-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3.12-debugsource-0:3.12.13-2.el10_2.1.x86_64.rpm", "python3-tkinter-0:3.12.13-2.el10_2.1.aarch64.rpm", "python3.12-debuginfo-0:3.12.13-2.el10_2.1.ppc64le.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Updated python3.12 releases for Rocky Linux 10 address a critical CPU denial of service issue affecting the HTML parser.. Rocky Linux python3 update, CPU denial service security, important security patch, python3.12 advisory. . Severity: Important. LinuxSecurity.com Team
Jul 15, 2026
•Important
Rocky Linux
217
security advisorymoderateupdateOracle Linux 9 ELSA-2026-18957 Moderate Python3 Package Update Released
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-18957 http://linux.oracle.com/errata/ELSA-2026-18957.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: python3.11-3.11.13-10.0.1.el9_8.i686.rpm python3.11-3.11.13-10.0.1.el9_8.x86_64.rpm python3.11-debug-3.11.13-10.0.1.el9_8.i686.rpm python3.11-debug-3.11.13-10.0.1.el9_8.x86_64.rpm python3.11-devel-3.11.13-10.0.1.el9_8.i686.rpm python3.11-devel-3.11.13-10.0.1.el9_8.x86_64.rpm python3.11-idle-3.11.13-10.0.1.el9_8.i686.rpm python3.11-idle-3.11.13-10.0.1.el9_8.x86_64.rpm python3.11-libs-3.11.13-10.0.1.el9_8.i686.rpm python3.11-libs-3.11.13-10.0.1.el9_8.x86_64.rpm python3.11-test-3.11.13-10.0.1.el9_8.i686.rpm python3.11-test-3.11.13-10.0.1.el9_8.x86_64.rpm python3.11-tkinter-3.11.13-10.0.1.el9_8.i686.rpm python3.11-tkinter-3.11.13-10.0.1.el9_8.x86_64.rpm aarch64: python3.11-3.11.13-10.0.1.el9_8.aarch64.rpm python3.11-debug-3.11.13-10.0.1.el9_8.aarch64.rpm python3.11-devel-3.11.13-10.0.1.el9_8.aarch64.rpm python3.11-idle-3.11.13-10.0.1.el9_8.aarch64.rpm python3.11-libs-3.11.13-10.0.1.el9_8.aarch64.rpm python3.11-test-3.11.13-10.0.1.el9_8.aarch64.rpm python3.11-tkinter-3.11.13-10.0.1.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/python3.11-3.11.13-10.0.1.el9_8.src.rpm Related CVEs: CVE-2026-0865 Description of changes: [3.11.13-10.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-10] - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 _______________________________________________ El-errata mailing list
Jul 02, 2026
•moderate
Oracle
219
security advisoryXSSimportantRocky Linux Python3.14 Important Command Injection XSS RLSA-2026-28581
Important: python3.14 security, bug fix, and enhancement update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:28581", "synopsis": "Important: python3.14 security, bug fix, and enhancement update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for python3.14.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)\n\n* python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module (CVE-2026-6019)\n\nBug Fix(es) and Enhancement(s):\n\n* [10.2.z]Update python3.14 to 3.14.5 for the incremental GC changes (JIRA:Rocky Linux-176147)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2460869", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2460869", "description": ""}, {"ticket": "2458049", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049", "description": ""}], "cves": [{"name": "CVE-2026-4786", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4786", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L", "cvss3BaseScore": "7.1", "cwe": "CWE-88"}, {"name": "CVE-2026-6019", "sourceBy": "MITRE", "sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6019", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "cvss3BaseScore": "6.8", "cwe": "CWE-79"}], "references": [], "publishedAt": "2026-06-27T06:04:25.075904Z", "rpms": {"Rocky Linux 10": {"nvras": ["python3.14-freethreading-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-tkinter-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-debug-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-debugsource-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-devel-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-devel-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-debuginfo-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-tkinter-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-test-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-debug-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-debug-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-debugsource-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-tkinter-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-0:3.14.5-1.el10_2.src.rpm", "python3.14-freethreading-test-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-tkinter-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-freethreading-idle-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-test-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-libs-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-tkinter-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-idle-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-freethreading-test-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-test-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-libs-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-tkinter-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-freethreading-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-test-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-idle-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-libs-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-tkinter-0:3.14.5-1.el10_2.x86_64.rpm","python3.14-freethreading-idle-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-devel-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-freethreading-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-freethreading-libs-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-debug-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-idle-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-debug-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-idle-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-freethreading-test-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-test-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-devel-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-debuginfo-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-debuginfo-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-debug-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-devel-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-idle-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-freethreading-libs-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-debugsource-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-freethreading-devel-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-freethreading-tkinter-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-debug-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-debugsource-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-debug-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-devel-0:3.14.5-1.el10_2.s390x.rpm", "python3.14-idle-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-libs-0:3.14.5-1.el10_2.x86_64.rpm", "python3.14-freethreading-libs-0:3.14.5-1.el10_2.ppc64le.rpm", "python3.14-debuginfo-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-freethreading-libs-0:3.14.5-1.el10_2.aarch64.rpm", "python3.14-freethreading-devel-0:3.14.5-1.el10_2.aarch64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Critical python3.14 updates include bug fixes and enhancements addressing security threats to Rocky Linux.. python security updates, rocky linux advisory, python3 enhancements. .Severity: Important. LinuxSecurity.com Team
Jun 27, 2026
•Important
Rocky Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!