Red Hat Product Errata RHSA-2026:35838 - Security Advisory Issued: 2026-07-06 Updated: 2026-07-06 RHSA-2026:35838 - Security Advisory Overview Updated Packages Synopsis Important: python3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2458049 - CVE-2026-4786 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API CVEs CVE-2026-4786 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM python3-3.6.8-21.el7_9.6.src.rpm SHA-256: 82d5a4758f46933f12872695b3b757405531a30ee43f63f1dc839cf925a90d88 x86_64 python3-3.6.8-21.el7_9.6.i686.rpm SHA-256: 3c741d4ea4f88b2a52fac6e2efacfc17c517ceca3e45afdaf3eab771fa0a7929 python3-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: cd7d3e2761ed1e9d522b6c03af88520413e9bbaff25c3ff0d83ea9aa14a68372 python3-debug-3.6.8-21.el7_9.6.i686.rpm SHA-256: 98c715d205618680a968afc0b8df22f2a64e635fee56dd086e5c8cde7e20db20 python3-debug-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: 7d6b19e3cec95eb2ef14e9e0271ab9e4d40a124b720a47ffeed29819be95bd55 python3-debuginfo-3.6.8-21.el7_9.6.i686.rpm SHA-256: 67a45fb771559400c35602e6e5a6c25fbe1f2966621c1c3282edf98c6d777585 python3-debuginfo-3.6.8-21.el7_9.6.i686.rpm SHA-256: 67a45fb771559400c35602e6e5a6c25fbe1f2966621c1c3282edf98c6d777585 python3-debuginfo-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: fbe40c2315d0738f21c10c03eee579786f7e94d7beadab0362ac06f373bcc694 python3-debuginfo-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: fbe40c2315d0738f21c10c03eee579786f7e94d7beadab0362ac06f373bcc694 python3-devel-3.6.8-21.el7_9.6.i686.rpm SHA-256: 283f41ce3bd07c363cb2ac0923626b23d6876f55dfe970e29bd97140b1faa47a python3-devel-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: d72f1c10bc1a5fb59b4b7646cf631a52c7f8bd046716d4b426c5cc9baf122091 python3-idle-3.6.8-21.el7_9.6.i686.rpm SHA-256: bc3cfdab39f3db360b820c0879398ffe3c50e8d143f5637ea67b473ac8667e29 python3-idle-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: 37a04189c308629c3a53f5f0e00c1f20e1b542f02cab6da86d5385f63a979398 python3-libs-3.6.8-21.el7_9.6.i686.rpm SHA-256: 01b5857c92f435adca6472c76fa79455301ccc219d1bfb6f604381f8081d14d9 python3-libs-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: f21dafe658a1c78e8bf298d5e9805abcc3842e6d5a75658d512844844ad8b247 python3-test-3.6.8-21.el7_9.6.i686.rpm SHA-256: 4631ac793e1323e88167f18b6e3a8b952ef1376f7fa4b55daba0a534b1501bfe python3-test-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: 307b8a2323881b244e9ec05c2e2fb409359719e858c6628df983d2585c9478f6 python3-tkinter-3.6.8-21.el7_9.6.i686.rpm SHA-256: b3ab904edba2728bd31b55b33d1b9dd7178779effb2f4299c665479cef81ecd3 python3-tkinter-3.6.8-21.el7_9.6.x86_64.rpm SHA-256: 5720614602fad61445ce8e574256ebb00562246e13253dbc8adf1eedf7bc00de Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM python3-3.6.8-21.el7_9.6.src.rpm SHA-256: 82d5a4758f46933f12872695b3b757405531a30ee43f63f1dc839cf925a90d88 s390x python3-3.6.8-21.el7_9.6.s390.rpm SHA-256: 5f005cc6fb338335110bb28bbfef85133994856415e6eeebbcbea810c0af96af python3-3.6.8-21.el7_9.6.s390x.rpm SHA-256: d9dfbb1536faff60e7bdfea87c9360144f206cc1aeb735d8cc5197e6aa5b649d python3-debug-3.6.8-21.el7_9.6.s390.rpm SHA-256: 99d55b9de6b2bbcafbbaf18c4cfabd0c1f5ea647bedbe903b4e12ff5405290dd python3-debug-3.6.8-21.el7_9.6.s390x.rpm SHA-256: b73bd4d9cc670f13e5b9b12cdc8d2668ff236b6da83387daa8150c671c81e7ab python3-debuginfo-3.6.8-21.el7_9.6.s390.rpm SHA-256: 4e46a2258d02d2f8b69e77ad1ebdb1da0fc0eff39c2ffc0e738da099ced47c5d python3-debuginfo-3.6.8-21.el7_9.6.s390.rpm SHA-256: 4e46a2258d02d2f8b69e77ad1ebdb1da0fc0eff39c2ffc0e738da099ced47c5d python3-debuginfo-3.6.8-21.el7_9.6.s390x.rpm SHA-256: 330285234d9151ca3409d2025470c8c26dc54215005b74d6b7543732e650aad0 python3-debuginfo-3.6.8-21.el7_9.6.s390x.rpm SHA-256: 330285234d9151ca3409d2025470c8c26dc54215005b74d6b7543732e650aad0 python3-devel-3.6.8-21.el7_9.6.s390.rpm SHA-256: 3506cce8a5102b482217291136ee0a7185ecd37474edbce3608c8127e6d8aed7 python3-devel-3.6.8-21.el7_9.6.s390x.rpm SHA-256: 7861659e63a2f1bccb3c63a03c435ae74e012b438dad9183b49e20b48094e473 python3-idle-3.6.8-21.el7_9.6.s390.rpm SHA-256: dbdd0dab5f561912c7f3a3e42533cbbf5e934b59933d148aad34d8297b3b8f46 python3-idle-3.6.8-21.el7_9.6.s390x.rpm SHA-256: 807fbc5f94f6f0e74f53b6cf329cad2969b6eb678902aab9c9c5d4efcdccca5d python3-libs-3.6.8-21.el7_9.6.s390.rpm SHA-256: 0b34d56d6792d2238601dd36108ec410decd0657bbc57a6dae2db2231510b271 python3-libs-3.6.8-21.el7_9.6.s390x.rpm SHA-256: 0f46eccb067b661c506c715bd77c2d93f16a55dbb94efa180b2114900f789e9d python3-test-3.6.8-21.el7_9.6.s390.rpm SHA-256: 7306333773307a4ec9c4659ccc3dc377fe50e6d199ad8e2cf41c06846aafc16a python3-test-3.6.8-21.el7_9.6.s390x.rpm SHA-256: d1ac172b79e455dbdfe65a7a3bec79c400c8781a49304652cf54876d352e7fd2 python3-tkinter-3.6.8-21.el7_9.6.s390.rpm SHA-256: e0fc3f551981d95f9a7defc4453764d56534a6f78d058d75df47292aac52d275 python3-tkinter-3.6.8-21.el7_9.6.s390x.rpm SHA-256: 9da647457c0d2c54f9a31cff249a73300743b8308b05d5eb239476d6861cf338 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM python3-3.6.8-21.el7_9.6.src.rpm SHA-256: 82d5a4758f46933f12872695b3b757405531a30ee43f63f1dc839cf925a90d88 ppc64 python3-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 0c246e1b0e8a5dcf332883d4aa71cf92ccb25cf698314184e8593d36121eaed5 python3-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: 04cd9da7777f30b81ef78d5cfedb9cf6f9af48b3df34ef04dfa4635d5419cdd5 python3-debug-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 85ecc64944f75d33a5f4a59953e52bc15fbac54144fdad23b7532599ae315e2f python3-debug-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: e7d818f2ae9d728a15188f17c6d6a63147ae4dad26ef9853515a8fdebf7c9893 python3-debuginfo-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 01923b53b78ac706a7715ddf20775b61cacc317bb17e6bbeb84f39b6732718fa python3-debuginfo-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 01923b53b78ac706a7715ddf20775b61cacc317bb17e6bbeb84f39b6732718fa python3-debuginfo-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: 440dd91d1cf1e3037590fdddee26f18aedb067343133a3618001820dede30f30 python3-debuginfo-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: 440dd91d1cf1e3037590fdddee26f18aedb067343133a3618001820dede30f30 python3-devel-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 51b0c96d9397d13ee3b86351b1d38273fb67e7899cb6f3f7d7325c15210d387a python3-devel-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: e25bac47767da50c093933eb9523eaa4b47aac7c367e3be69d0277279fea0940 python3-idle-3.6.8-21.el7_9.6.ppc.rpm SHA-256: cd863221a16a99cf44591c2338aadc08efaa570566d8f9c782a2e9318170abce python3-idle-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: a602b70d7fad07694de65d7c4809696b5a52cf3aad4368583a9d7f5df2e92b59 python3-libs-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 5d4e24cb65be962e3c2b9eae2b06d61a0481b7950f327bf3df8df35aa4690445 python3-libs-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: e2eec1945924a676f048ccdec6d2b99f427576fc0e461bf7dd367a839373258f python3-test-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 9a8265f594f81135d347e4361518f67b01763298cd16f1bc1beb65ec8451946a python3-test-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: 278d5eacda9cb2398ea2781fb9ff65051a86e0694b586898c2b292dbc781cd7b python3-tkinter-3.6.8-21.el7_9.6.ppc.rpm SHA-256: 7ebdf750d43b4a6f845334d4b09170dff9f5634803cad3af44ed4a1530f8cabc python3-tkinter-3.6.8-21.el7_9.6.ppc64.rpm SHA-256: dafd805a6b4b5e3d19a3519c1f6a5c80383e93c60399ebe6af6303206f9c8eb6 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM python3-3.6.8-21.el7_9.6.src.rpm SHA-256: 82d5a4758f46933f12872695b3b757405531a30ee43f63f1dc839cf925a90d88 ppc64le python3-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 458aa0ec136ab6b3d7fc1af48a5b1d26617931b1b5424b98cda51b52f4395e02 python3-debug-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 27b4a733926fd06829e77afab7146a63bc1e16a38880f0259e66b4482a7d0099 python3-debuginfo-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 6a7893e01d777658e338086233ccae7243a5ba099e5d5f32f58b0c0b8af6a467 python3-debuginfo-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 6a7893e01d777658e338086233ccae7243a5ba099e5d5f32f58b0c0b8af6a467 python3-devel-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 0a3f784482dc5bb042687230a217ce19b91f47c432bc0e2d989523d3a9a6088a python3-idle-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 6e8076fb0160ce0cc5994d015205fea45e758c21f813bc6316d2916a64765acf python3-libs-3.6.8-21.el7_9.6.ppc64le.rpm SHA-256: 5c44a25153cbb1709212da20367e6cb78c5660