Security News

Cybersecurity news aggregator

🔄
HIGH Updates Red Hat Errata

RHSA-2026:39320: Important: python3 security update

This vulnerability (CVE-2026-15308, CVSS 7.5 HIGH) is a CPU denial-of-service flaw in Python's HTML parser triggered by repeated unterminated markup declarations. The NVD data indicates all Python versions prior to 3.15.0 are affected, and the fix is to upgrade to version 3.15.0.
Read Full Article →

Red Hat Product Errata RHSA-2026:39320 - Security Advisory Issued: 2026-07-14 Updated: 2026-07-14 RHSA-2026:39320 - Security Advisory Overview Updated Packages Synopsis Important: python3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2498608 - CVE-2026-15308 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVEs CVE-2026-15308 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM python3-3.6.8-77.el8_10.src.rpm SHA-256: 3b12333562fc45001fa23018daa43263201462ac0f7c374734b563762049d71b x86_64 platform-python-3.6.8-77.el8_10.i686.rpm SHA-256: e9a64b76e9373997ebaa26ce153272b5f2d901ed9de1410904f425f60a55a986 platform-python-3.6.8-77.el8_10.x86_64.rpm SHA-256: 12c0b256631bc1a2d869e8ce16684bd4a4d2dd75afef3adfd06e1204c145572b platform-python-debug-3.6.8-77.el8_10.i686.rpm SHA-256: 62625726c0246dc0bb73a7f01631a8f4fa23cd67535a5ec0249324cd206c053d platform-python-debug-3.6.8-77.el8_10.x86_64.rpm SHA-256: 338fd4b78397cedb327e7e39f2edfe0b4536a77d1f88f2d79e3f05064aee7aad platform-python-devel-3.6.8-77.el8_10.i686.rpm SHA-256: 909bfac6e1a9daf1a5eef38c420b1191ef9869bdf1b342a6a936857a84f9b5dc platform-python-devel-3.6.8-77.el8_10.x86_64.rpm SHA-256: 0219a638c8ccc8a519b1117b3dcff6d98122a962b711f4e43b72f637cd12d2f2 python3-debuginfo-3.6.8-77.el8_10.i686.rpm SHA-256: ef960566a7aaf96af022d49a45bc083204045327bf0eebd9f3b1eb5459af5374 python3-debuginfo-3.6.8-77.el8_10.i686.rpm SHA-256: ef960566a7aaf96af022d49a45bc083204045327bf0eebd9f3b1eb5459af5374 python3-debuginfo-3.6.8-77.el8_10.x86_64.rpm SHA-256: 21f939da7be37dc3989d9c928c6ae89985fdd93eca0ef469a26ddfbbda46b4f2 python3-debuginfo-3.6.8-77.el8_10.x86_64.rpm SHA-256: 21f939da7be37dc3989d9c928c6ae89985fdd93eca0ef469a26ddfbbda46b4f2 python3-debugsource-3.6.8-77.el8_10.i686.rpm SHA-256: 6a8e12a345874ed9f2bb33223bfb24a5c7eea7dd0f1abc4d2fc4b3c2e97d313f python3-debugsource-3.6.8-77.el8_10.i686.rpm SHA-256: 6a8e12a345874ed9f2bb33223bfb24a5c7eea7dd0f1abc4d2fc4b3c2e97d313f python3-debugsource-3.6.8-77.el8_10.x86_64.rpm SHA-256: ad75da864e632bbbb7a4d52a5f08c7b9faacd7987e4277f92c4ffa4ab128e4c3 python3-debugsource-3.6.8-77.el8_10.x86_64.rpm SHA-256: ad75da864e632bbbb7a4d52a5f08c7b9faacd7987e4277f92c4ffa4ab128e4c3 python3-idle-3.6.8-77.el8_10.i686.rpm SHA-256: 89e2c35f5e3700967fbb7e58dd74405e3617113b68407921b80b5cfe8fdaa309 python3-idle-3.6.8-77.el8_10.x86_64.rpm SHA-256: 26b6c9a56ddbcf1380050377dd790cc55c3ae0672798b1d51197c57f43b5717e python3-libs-3.6.8-77.el8_10.i686.rpm SHA-256: efbfb14fc191b15c5eb36a3b5f394828db34bf7423513e06a7d435c4c58637b3 python3-libs-3.6.8-77.el8_10.x86_64.rpm SHA-256: 62b4a37fd32495cee322497d58fb3de026083753811d1175fa69b8103a0761ee python3-test-3.6.8-77.el8_10.i686.rpm SHA-256: f80894824d280f1379e5e8e3e1f6023912e7dcabd41f4f6e8e46b7fbf001b2c3 python3-test-3.6.8-77.el8_10.x86_64.rpm SHA-256: 9b21ecffd2746519a5bf5d7988156220e6fd4022ab78e6b4a4fac9e1aacbd4a4 python3-tkinter-3.6.8-77.el8_10.i686.rpm SHA-256: e738f831867d54246c3afbf4617f573ce8dc20195d1d71ffe6b5e9eae4ef4e00 python3-tkinter-3.6.8-77.el8_10.x86_64.rpm SHA-256: a69eac671228c0bb4cb626bec161a5121af6eaf36fb7d1f909453fefd95eb360 Red Hat Enterprise Linux for IBM z Systems 8 SRPM python3-3.6.8-77.el8_10.src.rpm SHA-256: 3b12333562fc45001fa23018daa43263201462ac0f7c374734b563762049d71b s390x platform-python-3.6.8-77.el8_10.s390x.rpm SHA-256: b1a4c1938b19a738d4d1c555ce3b80b445f8fa3df07b9a61c6d16f831f29bd7c platform-python-debug-3.6.8-77.el8_10.s390x.rpm SHA-256: b7fae36c278fb8f709590164a5ad0ee028d3a9271a22340f585f108fa91522ec platform-python-devel-3.6.8-77.el8_10.s390x.rpm SHA-256: ea5627a7699e7011f58149f1647d3484fed9dbf5eba71a287377bbeab377a777 python3-debuginfo-3.6.8-77.el8_10.s390x.rpm SHA-256: f9f27cff6f77c5942b4375f597e1ac41ef990984fbbdc56ef58a010f2fe0ca71 python3-debuginfo-3.6.8-77.el8_10.s390x.rpm SHA-256: f9f27cff6f77c5942b4375f597e1ac41ef990984fbbdc56ef58a010f2fe0ca71 python3-debugsource-3.6.8-77.el8_10.s390x.rpm SHA-256: 1c1602ecfd50bc488659eff6c0587c748a0ae0448cd103cb37005e46c8fbc11c python3-debugsource-3.6.8-77.el8_10.s390x.rpm SHA-256: 1c1602ecfd50bc488659eff6c0587c748a0ae0448cd103cb37005e46c8fbc11c python3-idle-3.6.8-77.el8_10.s390x.rpm SHA-256: cc67120353e91947618f50df771c792885924b87f178c578d16d248bb550a436 python3-libs-3.6.8-77.el8_10.s390x.rpm SHA-256: a904619d13d76acb11aa9ae102946ec7e17b406f544b60aa4c6f23d3dfb33c08 python3-test-3.6.8-77.el8_10.s390x.rpm SHA-256: d87156057046342460542b937ee2d94fee29ce6ce897f41ab4e9f5de00e9ffc5 python3-tkinter-3.6.8-77.el8_10.s390x.rpm SHA-256: 581f505189287d44810cb1471a1a35da66f8e61d6115284faeaed26e139701e7 Red Hat Enterprise Linux for Power, little endian 8 SRPM python3-3.6.8-77.el8_10.src.rpm SHA-256: 3b12333562fc45001fa23018daa43263201462ac0f7c374734b563762049d71b ppc64le platform-python-3.6.8-77.el8_10.ppc64le.rpm SHA-256: 8e6a986dc69c4e887fc88c94bb85e3330a8bef3bce9f61e1b359424809b31a7e platform-python-debug-3.6.8-77.el8_10.ppc64le.rpm SHA-256: 948984097005add9acbd6b8a3a5c96dacf88b22abe7ef73bbcfc7e18ad84942f platform-python-devel-3.6.8-77.el8_10.ppc64le.rpm SHA-256: e30fdee500c01bedbf1d3fc5e915a8f6c991047e2acaf00af4d30be1fe0355f1 python3-debuginfo-3.6.8-77.el8_10.ppc64le.rpm SHA-256: df0e4abf09c4f47f3cfbbaf0990dd9d088f757f51227671e5a9ce54cd7d37663 python3-debuginfo-3.6.8-77.el8_10.ppc64le.rpm SHA-256: df0e4abf09c4f47f3cfbbaf0990dd9d088f757f51227671e5a9ce54cd7d37663 python3-debugsource-3.6.8-77.el8_10.ppc64le.rpm SHA-256: af8e2413f82dc3e55aadc5471237cb1dc3db90de1ef37c8143a3a1913f4aa961 python3-debugsource-3.6.8-77.el8_10.ppc64le.rpm SHA-256: af8e2413f82dc3e55aadc5471237cb1dc3db90de1ef37c8143a3a1913f4aa961 python3-idle-3.6.8-77.el8_10.ppc64le.rpm SHA-256: c0e2ab3c6d2de83f80c18e59762816033091dfbf9efcce42910171ae10013897 python3-libs-3.6.8-77.el8_10.ppc64le.rpm SHA-256: 4916d8657eaaca85bd5c706cc0ff3af6b82819ce124db17d8ec63a788d2deea8 python3-test-3.6.8-77.el8_10.ppc64le.rpm SHA-256: a8fc6d7a8c87fc4af9c1fdad6128aac1c03058bae91c8816fa7bf1a8074d5c55 python3-tkinter-3.6.8-77.el8_10.ppc64le.rpm SHA-256: 0cf05f4dbcc0d23ffd80a27a87b0a5b478b6e48f9dcf7ed46eb22dc4538aedd3 Red Hat Enterprise Linux for ARM 64 8 SRPM python3-3.6.8-77.el8_10.src.rpm SHA-256: 3b12333562fc45001fa23018daa43263201462ac0f7c374734b563762049d71b aarch64 platform-python-3.6.8-77.el8_10.aarch64.rpm SHA-256: 718d441300a56a08b69277549f74dcd315d640676f76e29f70beb1bbdceb6fd8 platform-python-debug-3.6.8-77.el8_10.aarch64.rpm SHA-256: f28fe099ad3c055b1467b731d2831a4f27e6f46bd144b851d8ed04e30b108fbd platform-python-devel-3.6.8-77.el8_10.aarch64.rpm SHA-256: 7f841b55c267374700324ae3fd5734d88baf8711ded793ea6c6853232b9486de python3-debuginfo-3.6.8-77.el8_10.aarch64.rpm SHA-256: 899b268009adb0a36891e3f65b4980dff3eea4ff53e1e143579d121032e5f886 python3-debuginfo-3.6.8-77.el8_10.aarch64.rpm SHA-256: 899b268009adb0a36891e3f65b4980dff3eea4ff53e1e143579d121032e5f886 python3-debugsource-3.6.8-77.el8_10.aarch64.rpm SHA-256: 088f773a0da0a9b1993cfde30d0a69e7473b6dc3fb796900cd5560664c84b6e5 python3-debugsource-3.6.8-77.el8_10.aarch64.rpm SHA-256: 088f773a0da0a9b1993cfde30d0a69e7473b6dc3fb796900cd5560664c84b6e5 python3-idle-3.6.8-77.el8_10.aarch64.rpm SHA-256: ab6634c08992f60f3c934a499b9c335a432e8892abf88e9b824d7a028fe70c1f python3-libs-3.6.8-77.el8_10.aarch64.rpm SHA-256: 686acfed2bfd641630663603612d5a91c746a198e706b17ff17f1a299887a041 python3-test-3.6.8-77.el8_10.aarch64.rpm SHA-256: 172dbd9998d909f830e3e3d171afab4f2b9b1055d145d6561d0fd04fdf4671f6 python3-tkinter-3.6.8-77.el8_10.aarch64.rpm SHA-256: 9b26af656da1a382b5fdfb8243e37c77db6f72a90373a79b23ed5cb4be3e1917 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM python3-3.6.8-77.el8_10.src.rpm SHA-256: 3b12333562fc45001fa23018daa43263201462ac0f7c374734b563762049d71b x86_64 platform-python-3.6.8-77.el8_10.i686.rpm SHA-256: e9a64b76e9373997ebaa26ce153272b5f2d901ed9de1410904f425f60a55a986 platform-python-3.6.8-77.el8_10.x86_64.rpm SHA-256: 12c0b256631bc1a2d869e8ce16684bd4a4d2dd75afef3adfd06e1204c145572b platform-python-debug-3.6.8-77.el8_10.i686.rpm SHA-256: 62625726c0246dc0bb73a7f01631a8f4fa23cd67535a5ec

Share this article