- What: Security update for python
- Impact: Systems using Red Hat Enterprise Linux 6 affected
Red Hat Product Errata RHSA-2026:22144 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22144 - Security Advisory Overview Updated Packages Synopsis Important: python security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386 Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x Fixes BZ - 2458049 - CVE-2026-4786 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API CVEs CVE-2026-4786 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 SRPM python-2.6.6-70.el6_10.4.src.rpm SHA-256: 6c190029173834aa395d9c7a4661a092eddbdb883d57f81cd58bd8f65f8745e1 x86_64 python-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: c472ebbe6ec73f2054803b0ae7093d6e67666d08d15d55e405196defc5093db6 python-debuginfo-2.6.6-70.el6_10.4.i686.rpm SHA-256: b955516eb54d87cbfb7e40f23f86780c1f2d5f2e2d86b495d5bda6f335ff9e1d python-debuginfo-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: c6f85fb854526e76cdb12a39652ecedb33b356769388bab2c07d141b1d7a363b python-debuginfo-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: c6f85fb854526e76cdb12a39652ecedb33b356769388bab2c07d141b1d7a363b python-devel-2.6.6-70.el6_10.4.i686.rpm SHA-256: db44db85f137fc47153236b699e7e7da458e0311a3f6021489ce093c714d1efd python-devel-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: 79488cba284fdf99520845130f750f170954ddbaee2bd6abd912ea7fe040b097 python-libs-2.6.6-70.el6_10.4.i686.rpm SHA-256: e5002aa87afac4a5040528bd5b48bbd436c057b2104bf50eb4e2b4ccf5883a11 python-libs-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: 06d8629e58b5d8fdfbeb2efa99d210cfa53e1208e0be2b88ccc51dd050fc8a16 python-test-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: 8a150032e6a576c331e4112dcedec61b00027cea5755f83daf37cd61c9762ffe python-tools-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: ccbe7e27a3d8cf104b245c7b48b3a8b9b97fd2069cf01da9ec91126c13d177ee tkinter-2.6.6-70.el6_10.4.x86_64.rpm SHA-256: 576754b3e0904991a942f8da62a4cdb335a6deb1678d454b76cefa0036b8c5eb i386 python-2.6.6-70.el6_10.4.i686.rpm SHA-256: a6631c8d6b51669a51b08b7859477490d6f229256b47a3b1f448aab84a4c9132 python-debuginfo-2.6.6-70.el6_10.4.i686.rpm SHA-256: b955516eb54d87cbfb7e40f23f86780c1f2d5f2e2d86b495d5bda6f335ff9e1d python-debuginfo-2.6.6-70.el6_10.4.i686.rpm SHA-256: b955516eb54d87cbfb7e40f23f86780c1f2d5f2e2d86b495d5bda6f335ff9e1d python-devel-2.6.6-70.el6_10.4.i686.rpm SHA-256: db44db85f137fc47153236b699e7e7da458e0311a3f6021489ce093c714d1efd python-libs-2.6.6-70.el6_10.4.i686.rpm SHA-256: e5002aa87afac4a5040528bd5b48bbd436c057b2104bf50eb4e2b4ccf5883a11 python-test-2.6.6-70.el6_10.4.i686.rpm SHA-256: 734cc515f1b60418006018ec8ce280b38e8fe69cd535cd9f52e906b2fca99bb4 python-tools-2.6.6-70.el6_10.4.i686.rpm SHA-256: 377925eb5aab2eff2b0d7ec3f86ef9f8ded12f77e6a1c52a133f30f265bd86b8 tkinter-2.6.6-70.el6_10.4.i686.rpm SHA-256: c37f8c52203872aa267defb72987eac3c1a51954d758a479ebe9fbb1d58a697b Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 SRPM python-2.6.6-70.el6_10.4.src.rpm SHA-256: 6c190029173834aa395d9c7a4661a092eddbdb883d57f81cd58bd8f65f8745e1 s390x python-2.6.6-70.el6_10.4.s390x.rpm SHA-256: 72ea11723b1e2fe348b58ee34a86ad928964927e4289c45a46ca5206fabf6393 python-debuginfo-2.6.6-70.el6_10.4.s390.rpm SHA-256: 3f3b3d2fbf2e526699562a381688986ab9f10f796dcc2f1800b971221d706361 python-debuginfo-2.6.6-70.el6_10.4.s390x.rpm SHA-256: da1f8dfbfb79a96fa5902f11c15f81303eb3934d4b327e65105a68dd1903fd4b python-debuginfo-2.6.6-70.el6_10.4.s390x.rpm SHA-256: da1f8dfbfb79a96fa5902f11c15f81303eb3934d4b327e65105a68dd1903fd4b python-devel-2.6.6-70.el6_10.4.s390.rpm SHA-256: a6eb9de0d7aa94451d99adf56af1c35a19faf945e0080eb748e497489b6b9f7a python-devel-2.6.6-70.el6_10.4.s390x.rpm SHA-256: c2685ad483cedab86e573ebb9d54b58bd1830547bb66416eed387eed33c5b855 python-libs-2.6.6-70.el6_10.4.s390.rpm SHA-256: 1b2dfed34d7d463da1524a39c91e89bd597ddcd01524cebf3111c41db959c4e9 python-libs-2.6.6-70.el6_10.4.s390x.rpm SHA-256: dc437a1159104d52cece0e7246871a048560910462785d3b062e4c4fe5a769cd python-test-2.6.6-70.el6_10.4.s390x.rpm SHA-256: 1cd45257c9965d2505dc163781c9cfb0bf0d952bdd0b1fab63f75bc45565565b python-tools-2.6.6-70.el6_10.4.s390x.rpm SHA-256: 6afad5c3a148c85ab61a73ae8cac0bba1f94c19312068bfc4e25c2c1b88a7d12 tkinter-2.6.6-70.el6_10.4.s390x.rpm SHA-256: 848dc5e5e48ec3124c746219dfcd491bef229d279367fa11cc6379c63fcf0a09 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .