Red Hat Product Errata RHSA-2026:56219 - Security Advisory Issued: 2026-08-18 Updated: 2026-08-18 RHSA-2026:56219 - Security Advisory Overview Updated Packages Synopsis Important: python3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2491848 - CVE-2026-11940 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVEs CVE-2026-11940 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM python3-3.6.8-78.el8_10.src.rpm SHA-256: 744ad1216eba777fea0b9a95ccb7dedafa32044fd7adb8b91275923da97253e4 x86_64 platform-python-3.6.8-78.el8_10.i686.rpm SHA-256: d430a1c33cbf8f658eaa61928ed0fe945e1e63f35433ecb99c0d46242599520d platform-python-3.6.8-78.el8_10.x86_64.rpm SHA-256: 02f10c31256ad5a60eecba23d433a7476a7e06b204480c43fa20387769bc763b platform-python-debug-3.6.8-78.el8_10.i686.rpm SHA-256: 3189077b4df2f3399a4a7b6c380f7ac025f79676d2aff7e6f2af194aa70daa6e platform-python-debug-3.6.8-78.el8_10.x86_64.rpm SHA-256: 7bed8a20e6cfec8eda18f83279b23ec6145634393e1632d23c93c98a7ea4e3ec platform-python-devel-3.6.8-78.el8_10.i686.rpm SHA-256: 619183a0b979b4e93dc8d8a623c42ba06e2285f2e4a4196eb919d5b897642791 platform-python-devel-3.6.8-78.el8_10.x86_64.rpm SHA-256: 06d0380123a0d5f3945b9f0c6792a09fe8894057cb740d3b64cc4ab29ceeaf69 python3-debuginfo-3.6.8-78.el8_10.i686.rpm SHA-256: 7d37a97d6446cca438cb31ad63b321a3c1e4d0d324f59c05f585e6b5a9cdb81f python3-debuginfo-3.6.8-78.el8_10.i686.rpm SHA-256: 7d37a97d6446cca438cb31ad63b321a3c1e4d0d324f59c05f585e6b5a9cdb81f python3-debuginfo-3.6.8-78.el8_10.x86_64.rpm SHA-256: bd59502dcf9696fbcf394ea4f7b2b4757ab400f0ed0c90383e31b7c004b4772d python3-debuginfo-3.6.8-78.el8_10.x86_64.rpm SHA-256: bd59502dcf9696fbcf394ea4f7b2b4757ab400f0ed0c90383e31b7c004b4772d python3-debugsource-3.6.8-78.el8_10.i686.rpm SHA-256: 46b35d44a7157a7a597e2cc7d2d6bafc4bf9021b84b92100b8ef20af29e1ca51 python3-debugsource-3.6.8-78.el8_10.i686.rpm SHA-256: 46b35d44a7157a7a597e2cc7d2d6bafc4bf9021b84b92100b8ef20af29e1ca51 python3-debugsource-3.6.8-78.el8_10.x86_64.rpm SHA-256: 7aa150e6481f48bd6a237998a346f9655d49ab752e30a262c36490fa7ba2075e python3-debugsource-3.6.8-78.el8_10.x86_64.rpm SHA-256: 7aa150e6481f48bd6a237998a346f9655d49ab752e30a262c36490fa7ba2075e python3-idle-3.6.8-78.el8_10.i686.rpm SHA-256: 48cd727700beb16e9213473a79e0ea760066a79108b3af84a76cf04b3a5f6563 python3-idle-3.6.8-78.el8_10.x86_64.rpm SHA-256: ffe9d436083e42a13e2949ac28c043928ab52794deb195d5f635624847f73e7a python3-libs-3.6.8-78.el8_10.i686.rpm SHA-256: 427c36658a62fb5cfd917854ba35a95e497b13eaedb8103247739b212582f932 python3-libs-3.6.8-78.el8_10.x86_64.rpm SHA-256: b2ffd8ef57e08c9f9b17129f885afa5e25435aff24e7d85d950d803c5a6a90fc python3-test-3.6.8-78.el8_10.i686.rpm SHA-256: fd8f0a57edb70c32c8067f51e052ed08aa707721484810295f5f183f5b7d68ef python3-test-3.6.8-78.el8_10.x86_64.rpm SHA-256: 99702cdc980a0ece9c007f7ffd8c5ae8659c91af1be48e05e38535c3bc00b266 python3-tkinter-3.6.8-78.el8_10.i686.rpm SHA-256: 4ac80d707fd6c2af8f0d13bd85ef45772770b8dc3d74a19d9938cd0997fe6e00 python3-tkinter-3.6.8-78.el8_10.x86_64.rpm SHA-256: c683b9978bab39c6c635dfe3dcaaeb4f06dceb844ce2920baf2f3714f2c000de Red Hat Enterprise Linux for IBM z Systems 8 SRPM python3-3.6.8-78.el8_10.src.rpm SHA-256: 744ad1216eba777fea0b9a95ccb7dedafa32044fd7adb8b91275923da97253e4 s390x platform-python-3.6.8-78.el8_10.s390x.rpm SHA-256: 717adad826cecec028b276ad15216afa3e8288114212e77de098ab945d26760e platform-python-debug-3.6.8-78.el8_10.s390x.rpm SHA-256: a18b9e1785dc7f58316d7514f433ea4b54be5da4b4259445e72271535ee1a7ec platform-python-devel-3.6.8-78.el8_10.s390x.rpm SHA-256: 0f1925bb84ac382c8a45f4f026ddf7dad29bf3af912420b0c85a1efbf23f3b52 python3-debuginfo-3.6.8-78.el8_10.s390x.rpm SHA-256: 9891a7d89b74cab7fde9feb2f672ca04ce661bf6eecd594359cd9d65ad19808b python3-debuginfo-3.6.8-78.el8_10.s390x.rpm SHA-256: 9891a7d89b74cab7fde9feb2f672ca04ce661bf6eecd594359cd9d65ad19808b python3-debugsource-3.6.8-78.el8_10.s390x.rpm SHA-256: b6f213c18b7d5a40af7bb23953092a5fc0ded467441ff9a3847450da1d1ba7d1 python3-debugsource-3.6.8-78.el8_10.s390x.rpm SHA-256: b6f213c18b7d5a40af7bb23953092a5fc0ded467441ff9a3847450da1d1ba7d1 python3-idle-3.6.8-78.el8_10.s390x.rpm SHA-256: 02ba9c8b76b080ad2308f856155511b5e7f728239be246f3d586289a450789d4 python3-libs-3.6.8-78.el8_10.s390x.rpm SHA-256: 49a60203903f10fe0e3810d343a3437dc6751ba5f3be3ef11814116ac0b43143 python3-test-3.6.8-78.el8_10.s390x.rpm SHA-256: 71f2de22a0ec48a2c634dafa4d68d4676d1f991e194fe0b59ac794eff7540913 python3-tkinter-3.6.8-78.el8_10.s390x.rpm SHA-256: 7652436ac957e3031d89556b9e763885369e2007c93a126749ff7b8094ae3a8f Red Hat Enterprise Linux for Power, little endian 8 SRPM python3-3.6.8-78.el8_10.src.rpm SHA-256: 744ad1216eba777fea0b9a95ccb7dedafa32044fd7adb8b91275923da97253e4 ppc64le platform-python-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 35fb6b59bbcd26a95055c865e2e55508b53609507ff48771ddf3f009b802d6d8 platform-python-debug-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 80b55f0b7661e9e5712258f77907bd409970475c08286ed985fbb5de18a50278 platform-python-devel-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 67c58777ebd52273d3393a48ad6acb6acfeb1cb7492d76a41b45fea10e2f1f0f python3-debuginfo-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 772257ad5b7a21e73e4a235bed7b811c0de74ff4d41ade9df4c0938339b4650d python3-debuginfo-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 772257ad5b7a21e73e4a235bed7b811c0de74ff4d41ade9df4c0938339b4650d python3-debugsource-3.6.8-78.el8_10.ppc64le.rpm SHA-256: a1569b696c37895bdb5fe5706a68bfc14061ec9a9e87cd8a6d69858cb8276f5d python3-debugsource-3.6.8-78.el8_10.ppc64le.rpm SHA-256: a1569b696c37895bdb5fe5706a68bfc14061ec9a9e87cd8a6d69858cb8276f5d python3-idle-3.6.8-78.el8_10.ppc64le.rpm SHA-256: fa43909adefdabcdbd013cca03c1c816c723a015535f51547716b77dab09be66 python3-libs-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 4bedaff74e7c4b95d9922d754c9d5983943ce3144b678d85c80154ee3baf5d7e python3-test-3.6.8-78.el8_10.ppc64le.rpm SHA-256: da01d77ee07c8d9f5cc4772bb0e7b986f12b296c82f21640aba9bf37081867d7 python3-tkinter-3.6.8-78.el8_10.ppc64le.rpm SHA-256: 8f2df8ac24aa440a6378deb000aa05a9bcc322aefc5f2dde5482601e66051d3a Red Hat Enterprise Linux for ARM 64 8 SRPM python3-3.6.8-78.el8_10.src.rpm SHA-256: 744ad1216eba777fea0b9a95ccb7dedafa32044fd7adb8b91275923da97253e4 aarch64 platform-python-3.6.8-78.el8_10.aarch64.rpm SHA-256: d3c4b55d8fa6d5c657cc985d2e05cd33ad062c3268274377015a7ed9687f491f platform-python-debug-3.6.8-78.el8_10.aarch64.rpm SHA-256: 61da20ca043311d12759de980ab7c715198ad65117a583a25e5b6987e5b7d395 platform-python-devel-3.6.8-78.el8_10.aarch64.rpm SHA-256: 9d78a9117a77576caf9bed8b7daf5245b7a1bb88c5b8a33eb8b6f89a75085b4a python3-debuginfo-3.6.8-78.el8_10.aarch64.rpm SHA-256: 69a020cc2c8611c71a0fd5bb3dec6510add44f552527a281608a16332d113128 python3-debuginfo-3.6.8-78.el8_10.aarch64.rpm SHA-256: 69a020cc2c8611c71a0fd5bb3dec6510add44f552527a281608a16332d113128 python3-debugsource-3.6.8-78.el8_10.aarch64.rpm SHA-256: f18a11647e6862757626b99a0231b634db135928b67a15ff1f6290b6fcb87c3a python3-debugsource-3.6.8-78.el8_10.aarch64.rpm SHA-256: f18a11647e6862757626b99a0231b634db135928b67a15ff1f6290b6fcb87c3a python3-idle-3.6.8-78.el8_10.aarch64.rpm SHA-256: 3b25567acfbf96fbb6ce5905c3661ef0ae893a1b5965509528cd41989fea3859 python3-libs-3.6.8-78.el8_10.aarch64.rpm SHA-256: 6bbb1f6b8ae8afe8c7108121cf04208072d442b3f664bf4bfc58f95d60878fc0 python3-test-3.6.8-78.el8_10.aarch64.rpm SHA-256: 0bb827c88c058ae38827ffbd599eb69fd40f895446e7310a2d4dc8db82bd8ed9 python3-tkinter-3.6.8-78.el8_10.aarch64.rpm SHA-256: fda552715e88169cc96ebf2b23d94660c55f5bbcc67ce54aa87746afe113bdb4 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM python3-3.6.8-78.el8_10.src.rpm SHA-256: 744ad1216eba777fea0b9a95ccb7dedafa32044fd7adb8b91275923da97253e4 x86_64 platform-python-3.6.8-78.el8_10.i686.rpm SHA-256: d430a1c33cbf8f658eaa61928ed0fe945e1e63f35433ecb99c0d46242599520d platform-python-3.6.8-78.el8_10.x86_64.rpm SHA-256: 02f10c31256ad5a60eecba23d433a7476a7e06b204480c43fa20387769bc763b platform-python-debug-3.6.8-78.el8_10.i686.rpm SHA-256: 3189077b4df2f3399a4a7b6c380f7ac025f79676d2a