Red Hat Product Errata RHSA-2026:54268 - Security Advisory Issued: 2026-08-12 Updated: 2026-08-12 RHSA-2026:54268 - Security Advisory Overview Updated Packages Synopsis Important: python3.9 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2491848 - CVE-2026-11940 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVEs CVE-2026-11940 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM python3.9-3.9.25-7.el9_8.3.src.rpm SHA-256: d4be5c5cea9a32cc7ee36bf3d858cba036c3cc826408c7be84057f9567b6d029 x86_64 python-unversioned-command-3.9.25-7.el9_8.3.noarch.rpm SHA-256: 6942913da91f52227ca9b22c6bd4269f49682a807beb0380dbdafe8c0a51d86e python3-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: f0d622eb17a038e98c23ef9bd6961c104c55b3534f69c301b2067cd9161f40f7 python3-devel-3.9.25-7.el9_8.3.i686.rpm SHA-256: 6d51eb7f210127b43456f3f62a7a667b77025862ee415859c1ac6ac1e04967da python3-devel-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 3cd130ec936476117225387581f54d30a932e93c3f23266c1213546057695c5d python3-libs-3.9.25-7.el9_8.3.i686.rpm SHA-256: b60ab69a24e0d6d64d4e45aa4daee6cb6f43c7e965560561cd4de0c6e1a3a032 python3-libs-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 6227afce7123d2e6c46a4a6d318087c512caebf6e09f7bfc0ba73f7e5853fba4 python3-tkinter-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 6094f64fa894a070897ee8f637518463e0bf22d2223d007668a92a7fa2dc9fdf python3.9-debuginfo-3.9.25-7.el9_8.3.i686.rpm SHA-256: 62dcb4cb180be22cd347a52da6d3994b26aab1cb189b36fa9c69356605d63f14 python3.9-debuginfo-3.9.25-7.el9_8.3.i686.rpm SHA-256: 62dcb4cb180be22cd347a52da6d3994b26aab1cb189b36fa9c69356605d63f14 python3.9-debuginfo-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 0b840281b85dac31f870afed93ee486777ecf225343f6168f1499322d4b1775a python3.9-debuginfo-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 0b840281b85dac31f870afed93ee486777ecf225343f6168f1499322d4b1775a python3.9-debugsource-3.9.25-7.el9_8.3.i686.rpm SHA-256: fc4e8c0fac91397b721d10b8bf5ab03194eaae2569e499930294114981c36265 python3.9-debugsource-3.9.25-7.el9_8.3.i686.rpm SHA-256: fc4e8c0fac91397b721d10b8bf5ab03194eaae2569e499930294114981c36265 python3.9-debugsource-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 038d215152b5d9bbda42fde9a3dd94d7ae1594199c78c46a11ea00ee5a2bb83b python3.9-debugsource-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 038d215152b5d9bbda42fde9a3dd94d7ae1594199c78c46a11ea00ee5a2bb83b Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM python3.9-3.9.25-7.el9_8.3.src.rpm SHA-256: d4be5c5cea9a32cc7ee36bf3d858cba036c3cc826408c7be84057f9567b6d029 x86_64 python-unversioned-command-3.9.25-7.el9_8.3.noarch.rpm SHA-256: 6942913da91f52227ca9b22c6bd4269f49682a807beb0380dbdafe8c0a51d86e python3-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: f0d622eb17a038e98c23ef9bd6961c104c55b3534f69c301b2067cd9161f40f7 python3-devel-3.9.25-7.el9_8.3.i686.rpm SHA-256: 6d51eb7f210127b43456f3f62a7a667b77025862ee415859c1ac6ac1e04967da python3-devel-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 3cd130ec936476117225387581f54d30a932e93c3f23266c1213546057695c5d python3-libs-3.9.25-7.el9_8.3.i686.rpm SHA-256: b60ab69a24e0d6d64d4e45aa4daee6cb6f43c7e965560561cd4de0c6e1a3a032 python3-libs-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 6227afce7123d2e6c46a4a6d318087c512caebf6e09f7bfc0ba73f7e5853fba4 python3-tkinter-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 6094f64fa894a070897ee8f637518463e0bf22d2223d007668a92a7fa2dc9fdf python3.9-debuginfo-3.9.25-7.el9_8.3.i686.rpm SHA-256: 62dcb4cb180be22cd347a52da6d3994b26aab1cb189b36fa9c69356605d63f14 python3.9-debuginfo-3.9.25-7.el9_8.3.i686.rpm SHA-256: 62dcb4cb180be22cd347a52da6d3994b26aab1cb189b36fa9c69356605d63f14 python3.9-debuginfo-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 0b840281b85dac31f870afed93ee486777ecf225343f6168f1499322d4b1775a python3.9-debuginfo-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 0b840281b85dac31f870afed93ee486777ecf225343f6168f1499322d4b1775a python3.9-debugsource-3.9.25-7.el9_8.3.i686.rpm SHA-256: fc4e8c0fac91397b721d10b8bf5ab03194eaae2569e499930294114981c36265 python3.9-debugsource-3.9.25-7.el9_8.3.i686.rpm SHA-256: fc4e8c0fac91397b721d10b8bf5ab03194eaae2569e499930294114981c36265 python3.9-debugsource-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 038d215152b5d9bbda42fde9a3dd94d7ae1594199c78c46a11ea00ee5a2bb83b python3.9-debugsource-3.9.25-7.el9_8.3.x86_64.rpm SHA-256: 038d215152b5d9bbda42fde9a3dd94d7ae1594199c78c46a11ea00ee5a2bb83b Red Hat Enterprise Linux for IBM z Systems 9 SRPM python3.9-3.9.25-7.el9_8.3.src.rpm SHA-256: d4be5c5cea9a32cc7ee36bf3d858cba036c3cc826408c7be84057f9567b6d029 s390x python-unversioned-command-3.9.25-7.el9_8.3.noarch.rpm SHA-256: 6942913da91f52227ca9b22c6bd4269f49682a807beb0380dbdafe8c0a51d86e python3-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 6c149abcf9a7fcd3f82eabf3eb8465a6a441b988c150cb999b637e74eb12c682 python3-devel-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 5c466f2f0d1ecbabf16c16583fed091c4cfddd02c95236d2016f47a6a2fde91c python3-libs-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 8702379915024560069775951e93819254eea3b38b844476a44346252436b240 python3-tkinter-3.9.25-7.el9_8.3.s390x.rpm SHA-256: fee6229ae7a45f71c6a0340521d4ddca0998b3cc3b4906f7121173a8ddecbd50 python3.9-debuginfo-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 972813b7081cb2803ec746a681ecd754352fc7a5c9f072b9c63947ead1fb2bee python3.9-debuginfo-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 972813b7081cb2803ec746a681ecd754352fc7a5c9f072b9c63947ead1fb2bee python3.9-debugsource-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 4679a73b6573fddea084a19386f4e8d5b62908a84d1a9cff79ec810057eafe88 python3.9-debugsource-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 4679a73b6573fddea084a19386f4e8d5b62908a84d1a9cff79ec810057eafe88 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM python3.9-3.9.25-7.el9_8.3.src.rpm SHA-256: d4be5c5cea9a32cc7ee36bf3d858cba036c3cc826408c7be84057f9567b6d029 s390x python-unversioned-command-3.9.25-7.el9_8.3.noarch.rpm SHA-256: 6942913da91f52227ca9b22c6bd4269f49682a807beb0380dbdafe8c0a51d86e python3-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 6c149abcf9a7fcd3f82eabf3eb8465a6a441b988c150cb999b637e74eb12c682 python3-devel-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 5c466f2f0d1ecbabf16c16583fed091c4cfddd02c95236d2016f47a6a2fde91c python3-libs-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 8702379915024560069775951e93819254eea3b38b844476a44346252436b240 python3-tkinter-3.9.25-7.el9_8.3.s390x.rpm SHA-256: fee6229ae7a45f71c6a0340521d4ddca0998b3cc3b4906f7121173a8ddecbd50 python3.9-debuginfo-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 972813b7081cb2803ec746a681ecd754352fc7a5c9f072b9c63947ead1fb2bee python3.9-debuginfo-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 972813b7081cb2803ec746a681ecd754352fc7a5c9f072b9c63947ead1fb2bee python3.9-debugsource-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 4679a73b6573fddea084a19386f4e8d5b62908a84d1a9cff79ec810057eafe88 python3.9-debugsource-3.9.25-7.el9_8.3.s390x.rpm SHA-256: 4679a73b6573fddea084a19386f4e8d5b62908a84d1a9cff79ec810057eafe88 Red Hat Enterprise Lin