Red Hat Product Errata RHSA-2026:39771 - Security Advisory Issued: 2026-07-15 Updated: 2026-07-15 RHSA-2026:39771 - Security Advisory Overview Updated Packages Synopsis Important: python3.12 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3.12 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2498608 - CVE-2026-15308 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVEs CVE-2026-15308 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM python3.12-3.12.13-3.el9_8.1.src.rpm SHA-256: 7e01f587203e8d951fb7a38dff1c893cb1a3de5d7e762be6d6623cafd7c7435f x86_64 python3.12-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: e3824eb610d0a5c444a9c49462dcd3c31e9ef2ce0b6f42f5b75e0d492a64deb6 python3.12-debuginfo-3.12.13-3.el9_8.1.i686.rpm SHA-256: cd230c05e0c5815638154086d9ca3d27b3bece3865c28ab28fbeac29eb8a41e2 python3.12-debuginfo-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: 655d21e361f8f449951673ace346404cc28c1fdbdedf5cbec8c592ea936704b3 python3.12-debugsource-3.12.13-3.el9_8.1.i686.rpm SHA-256: 561c6bdbbb2997589b4a5bbcdb71782f556bbffdb1fe1283089e9f15ef660d61 python3.12-debugsource-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: df8d2be4ad165011727c1e013a5b02415c9735846863505db761c4f59d31b418 python3.12-devel-3.12.13-3.el9_8.1.i686.rpm SHA-256: baa99d1863862ee0a8bade189de06562ccdfc2188aeac72da16e42bbc9f0b8fb python3.12-devel-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: d48f03d05360926a7fbeb37aec33c1593680cf719ad0c9e5354f87f9ab7d9609 python3.12-libs-3.12.13-3.el9_8.1.i686.rpm SHA-256: d7301207d084f85c58cfd2aa7dda539eb428a8bcdce7de30be75f0ef6401cccd python3.12-libs-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: 2135bca6d950ad5e8b3cc18e370fdeeedbe7bff413362247b28e0336d3bccb9d python3.12-tkinter-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: 14cb71956d3c792cc3fae8795728a0a7eb73680df92621a698d089f3defda8b8 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM python3.12-3.12.13-3.el9_8.1.src.rpm SHA-256: 7e01f587203e8d951fb7a38dff1c893cb1a3de5d7e762be6d6623cafd7c7435f x86_64 python3.12-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: e3824eb610d0a5c444a9c49462dcd3c31e9ef2ce0b6f42f5b75e0d492a64deb6 python3.12-debuginfo-3.12.13-3.el9_8.1.i686.rpm SHA-256: cd230c05e0c5815638154086d9ca3d27b3bece3865c28ab28fbeac29eb8a41e2 python3.12-debuginfo-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: 655d21e361f8f449951673ace346404cc28c1fdbdedf5cbec8c592ea936704b3 python3.12-debugsource-3.12.13-3.el9_8.1.i686.rpm SHA-256: 561c6bdbbb2997589b4a5bbcdb71782f556bbffdb1fe1283089e9f15ef660d61 python3.12-debugsource-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: df8d2be4ad165011727c1e013a5b02415c9735846863505db761c4f59d31b418 python3.12-devel-3.12.13-3.el9_8.1.i686.rpm SHA-256: baa99d1863862ee0a8bade189de06562ccdfc2188aeac72da16e42bbc9f0b8fb python3.12-devel-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: d48f03d05360926a7fbeb37aec33c1593680cf719ad0c9e5354f87f9ab7d9609 python3.12-libs-3.12.13-3.el9_8.1.i686.rpm SHA-256: d7301207d084f85c58cfd2aa7dda539eb428a8bcdce7de30be75f0ef6401cccd python3.12-libs-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: 2135bca6d950ad5e8b3cc18e370fdeeedbe7bff413362247b28e0336d3bccb9d python3.12-tkinter-3.12.13-3.el9_8.1.x86_64.rpm SHA-256: 14cb71956d3c792cc3fae8795728a0a7eb73680df92621a698d089f3defda8b8 Red Hat Enterprise Linux for IBM z Systems 9 SRPM python3.12-3.12.13-3.el9_8.1.src.rpm SHA-256: 7e01f587203e8d951fb7a38dff1c893cb1a3de5d7e762be6d6623cafd7c7435f s390x python3.12-3.12.13-3.el9_8.1.s390x.rpm SHA-256: 1b8026822b4302d08915e55b692f2cf274ed1a537d797d962883a7e8b7fc386a python3.12-debuginfo-3.12.13-3.el9_8.1.s390x.rpm SHA-256: e38932c5143ded2fb21a87357c2cdf9b461127575caa625d923e22d21d901b35 python3.12-debugsource-3.12.13-3.el9_8.1.s390x.rpm SHA-256: cd675e37df473a4170984a984c64520f64876ba95e88007fa4184a1d5a40962d python3.12-devel-3.12.13-3.el9_8.1.s390x.rpm SHA-256: d57803b33c39e6c79d96b709467fc2beeca205adc91720a0313bc620a4b994b8 python3.12-libs-3.12.13-3.el9_8.1.s390x.rpm SHA-256: 20b2d5c7372f2f46c180d0e34806c99375326c1bb17afc2f4355715bfa28753d python3.12-tkinter-3.12.13-3.el9_8.1.s390x.rpm SHA-256: fcc5409371f11510acafd6a71158ae3de54d9f7ea22cdc7c0bc58d4bca66e60b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM python3.12-3.12.13-3.el9_8.1.src.rpm SHA-256: 7e01f587203e8d951fb7a38dff1c893cb1a3de5d7e762be6d6623cafd7c7435f s390x python3.12-3.12.13-3.el9_8.1.s390x.rpm SHA-256: 1b8026822b4302d08915e55b692f2cf274ed1a537d797d962883a7e8b7fc386a python3.12-debuginfo-3.12.13-3.el9_8.1.s390x.rpm SHA-256: e38932c5143ded2fb21a87357c2cdf9b461127575caa625d923e22d21d901b35 python3.12-debugsource-3.12.13-3.el9_8.1.s390x.rpm SHA-256: cd675e37df473a4170984a984c64520f64876ba95e88007fa4184a1d5a40962d python3.12-devel-3.12.13-3.el9_8.1.s390x.rpm SHA-256: d57803b33c39e6c79d96b709467fc2beeca205adc91720a0313bc620a4b994b8 python3.12-libs-3.12.13-3.el9_8.1.s390x.rpm SHA-256: 20b2d5c7372f2f46c180d0e34806c99375326c1bb17afc2f4355715bfa28753d python3.12-tkinter-3.12.13-3.el9_8.1.s390x.rpm SHA-256: fcc5409371f11510acafd6a71158ae3de54d9f7ea22cdc7c0bc58d4bca66e60b Red Hat Enterprise Linux for Power, little endian 9 SRPM python3.12-3.12.13-3.el9_8.1.src.rpm SHA-256: 7e01f587203e8d951fb7a38dff1c893cb1a3de5d7e762be6d6623cafd7c7435f ppc64le python3.12-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 18f196faebc9865f11e1ca27f82cc69b92e5354cc5580072793beabb70eeec91 python3.12-debuginfo-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 4c111e86501b67f59cf8ff74ebae4fb35410c6f1f9f1c940b07d57d5779fe579 python3.12-debugsource-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 4a987303e3812b197b93d0ba53625767946891c504fb9a41e34f0cab91e087cb python3.12-devel-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 814b238f29a6e865bab595c09b10813b795fc2d65bfd3dc7c2d2c84b1e27bd1a python3.12-libs-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 56acbc33e3d1bf7f5795fc53937a8e60e2d2f62e5eb668f017ecaa0255e42cd4 python3.12-tkinter-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 8b6da968d92e6cfdb13ea8fd36ac1fec8ee4afd8551440c9162313ac50cbd9b8 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM python3.12-3.12.13-3.el9_8.1.src.rpm SHA-256: 7e01f587203e8d951fb7a38dff1c893cb1a3de5d7e762be6d6623cafd7c7435f ppc64le python3.12-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 18f196faebc9865f11e1ca27f82cc69b92e5354cc5580072793beabb70eeec91 python3.12-debuginfo-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 4c111e86501b67f59cf8ff74ebae4fb35410c6f1f9f1c940b07d57d5779fe579 python3.12-debugsource-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 4a987303e3812b197b93d0ba53625767946891c504fb9a41e34f0cab91e087cb python3.12-devel-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 814b238f29a6e865bab595c09b10813b795fc2d65bfd3dc7c2d2c84b1e27bd1a python3.12-libs-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 56acbc33e3d1bf7f5795fc53937a8e60e2d2f62e5eb668f017ecaa0255e42cd4 python3.12-tkinter-3.12.13-3.el9_8.1.ppc64le.rpm SHA-256: 8b6da968d92e6cfdb13ea8fd36ac1fec8ee4afd8551440c9162313ac50cbd9b8 Red Hat Enterprise Linux for ARM 64 9 SRPM python3