Red Hat Product Errata RHSA-2026:58902 - Security Advisory Issued: 2026-08-24 Updated: 2026-08-24 RHSA-2026:58902 - Security Advisory Overview Updated Packages Synopsis Important: python3.12 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for python3.12 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory (CVE-2026-11940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2491848 - CVE-2026-11940 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVEs CVE-2026-11940 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM python3.12-3.12.14-1.el10_2.src.rpm SHA-256: 6eef0d4db7631742f9bb1722d09e9ad58b8788b37e88de8405f992ad5d09c6d4 x86_64 python-unversioned-command-3.12.14-1.el10_2.noarch.rpm SHA-256: 7406223eae376d8219e52f183248e275e84eb3eb1020c40e02e89a39cdb07ef9 python3-3.12.14-1.el10_2.x86_64.rpm SHA-256: e55e31c77708592bf764dedb3d2742431293dda94c4918c46f52c564489f7864 python3-devel-3.12.14-1.el10_2.x86_64.rpm SHA-256: ced263531111fb129153c5a73d4051db1cc2cfce91b8b8959a03f5c332bee25f python3-libs-3.12.14-1.el10_2.x86_64.rpm SHA-256: 897a024b8cb94b346930ec2f134a57fdbe7f89255930d31913ca3701605b0cac python3-tkinter-3.12.14-1.el10_2.x86_64.rpm SHA-256: 4bce88caf3b8d56050e88ca12b8e14444af4ce52a0a0ad30a0e4b1613dc0f4f5 python3.12-debuginfo-3.12.14-1.el10_2.x86_64.rpm SHA-256: 7ba2637a71b8e1840b61d0513baa3542ee5a635a6c50d7bfe39427d1dc5542a9 python3.12-debuginfo-3.12.14-1.el10_2.x86_64.rpm SHA-256: 7ba2637a71b8e1840b61d0513baa3542ee5a635a6c50d7bfe39427d1dc5542a9 python3.12-debugsource-3.12.14-1.el10_2.x86_64.rpm SHA-256: 4fcc5721ca430ae41b16d4e9c3647326e3f235b4f6a445c6f27f41d4e193417f python3.12-debugsource-3.12.14-1.el10_2.x86_64.rpm SHA-256: 4fcc5721ca430ae41b16d4e9c3647326e3f235b4f6a445c6f27f41d4e193417f Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM python3.12-3.12.14-1.el10_2.src.rpm SHA-256: 6eef0d4db7631742f9bb1722d09e9ad58b8788b37e88de8405f992ad5d09c6d4 x86_64 python-unversioned-command-3.12.14-1.el10_2.noarch.rpm SHA-256: 7406223eae376d8219e52f183248e275e84eb3eb1020c40e02e89a39cdb07ef9 python3-3.12.14-1.el10_2.x86_64.rpm SHA-256: e55e31c77708592bf764dedb3d2742431293dda94c4918c46f52c564489f7864 python3-devel-3.12.14-1.el10_2.x86_64.rpm SHA-256: ced263531111fb129153c5a73d4051db1cc2cfce91b8b8959a03f5c332bee25f python3-libs-3.12.14-1.el10_2.x86_64.rpm SHA-256: 897a024b8cb94b346930ec2f134a57fdbe7f89255930d31913ca3701605b0cac python3-tkinter-3.12.14-1.el10_2.x86_64.rpm SHA-256: 4bce88caf3b8d56050e88ca12b8e14444af4ce52a0a0ad30a0e4b1613dc0f4f5 python3.12-debuginfo-3.12.14-1.el10_2.x86_64.rpm SHA-256: 7ba2637a71b8e1840b61d0513baa3542ee5a635a6c50d7bfe39427d1dc5542a9 python3.12-debuginfo-3.12.14-1.el10_2.x86_64.rpm SHA-256: 7ba2637a71b8e1840b61d0513baa3542ee5a635a6c50d7bfe39427d1dc5542a9 python3.12-debugsource-3.12.14-1.el10_2.x86_64.rpm SHA-256: 4fcc5721ca430ae41b16d4e9c3647326e3f235b4f6a445c6f27f41d4e193417f python3.12-debugsource-3.12.14-1.el10_2.x86_64.rpm SHA-256: 4fcc5721ca430ae41b16d4e9c3647326e3f235b4f6a445c6f27f41d4e193417f Red Hat Enterprise Linux for IBM z Systems 10 SRPM python3.12-3.12.14-1.el10_2.src.rpm SHA-256: 6eef0d4db7631742f9bb1722d09e9ad58b8788b37e88de8405f992ad5d09c6d4 s390x python-unversioned-command-3.12.14-1.el10_2.noarch.rpm SHA-256: 7406223eae376d8219e52f183248e275e84eb3eb1020c40e02e89a39cdb07ef9 python3-3.12.14-1.el10_2.s390x.rpm SHA-256: f90da1856649694bf25cbefc7090fb3de4694f52b26e23430eb8a0f2bd2d29f3 python3-devel-3.12.14-1.el10_2.s390x.rpm SHA-256: 62b41f3b40985d9b0d1133ebd213308a8ccb0c1d14abf31394ecbc18b15ada5c python3-libs-3.12.14-1.el10_2.s390x.rpm SHA-256: 0c49ea5f3f7aa8e8ae2df89d395c0aab1a8e4ff25a840b187f906d257d143850 python3-tkinter-3.12.14-1.el10_2.s390x.rpm SHA-256: 57b6961734768b3d64bc4c8de23ae4d78a707f9a386be6f0d553203c3b871eeb python3.12-debuginfo-3.12.14-1.el10_2.s390x.rpm SHA-256: f06441163700f3800e60cab5e6be00bc6b33bb93434c5e33c113f4f9b1b96dd8 python3.12-debuginfo-3.12.14-1.el10_2.s390x.rpm SHA-256: f06441163700f3800e60cab5e6be00bc6b33bb93434c5e33c113f4f9b1b96dd8 python3.12-debugsource-3.12.14-1.el10_2.s390x.rpm SHA-256: d7629bdd8af9554101b5fe7b9f7c828b81caf16dcebb474966940bfa3958dc0d python3.12-debugsource-3.12.14-1.el10_2.s390x.rpm SHA-256: d7629bdd8af9554101b5fe7b9f7c828b81caf16dcebb474966940bfa3958dc0d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM python3.12-3.12.14-1.el10_2.src.rpm SHA-256: 6eef0d4db7631742f9bb1722d09e9ad58b8788b37e88de8405f992ad5d09c6d4 s390x python-unversioned-command-3.12.14-1.el10_2.noarch.rpm SHA-256: 7406223eae376d8219e52f183248e275e84eb3eb1020c40e02e89a39cdb07ef9 python3-3.12.14-1.el10_2.s390x.rpm SHA-256: f90da1856649694bf25cbefc7090fb3de4694f52b26e23430eb8a0f2bd2d29f3 python3-devel-3.12.14-1.el10_2.s390x.rpm SHA-256: 62b41f3b40985d9b0d1133ebd213308a8ccb0c1d14abf31394ecbc18b15ada5c python3-libs-3.12.14-1.el10_2.s390x.rpm SHA-256: 0c49ea5f3f7aa8e8ae2df89d395c0aab1a8e4ff25a840b187f906d257d143850 python3-tkinter-3.12.14-1.el10_2.s390x.rpm SHA-256: 57b6961734768b3d64bc4c8de23ae4d78a707f9a386be6f0d553203c3b871eeb python3.12-debuginfo-3.12.14-1.el10_2.s390x.rpm SHA-256: f06441163700f3800e60cab5e6be00bc6b33bb93434c5e33c113f4f9b1b96dd8 python3.12-debuginfo-3.12.14-1.el10_2.s390x.rpm SHA-256: f06441163700f3800e60cab5e6be00bc6b33bb93434c5e33c113f4f9b1b96dd8 python3.12-debugsource-3.12.14-1.el10_2.s390x.rpm SHA-256: d7629bdd8af9554101b5fe7b9f7c828b81caf16dcebb474966940bfa3958dc0d python3.12-debugsource-3.12.14-1.el10_2.s390x.rpm SHA-256: d7629bdd8af9554101b5fe7b9f7c828b81caf16dcebb474966940bfa3958dc0d Red Hat Enterprise Linux for Power, little endian 10 SRPM python3.12-3.12.14-1.el10_2.src.rpm SHA-256: 6eef0d4db7631742f9bb1722d09e9ad58b8788b37e88de8405f992ad5d09c6d4 ppc64le python-unversioned-command-3.12.14-1.el10_2.noarch.rpm SHA-256: 7406223eae376d8219e52f183248e275e84eb3eb1020c40e02e89a39cdb07ef9 python3-3.12.14-1.el10_2.ppc64le.rpm SHA-256: 20aecf57ceba0b3cf589ecb4b40a29403b8c799af8c9dfa0cbb2b5e12f13143a python3-devel-3.12.14-1.el10_2.ppc64le.rpm SHA-256: 9bc91b00aa6d483c75097d59210394cff9688ead71488e4fa81b2f027ad12c5b python3-libs-3.12.14-1.el10_2.ppc64le.rpm SHA-256: 754bff4746ac858494661a92472173e58a9786192a5981cfdc550101bb7b80ae python3-tkinter-3.12.14-1.el10_2.ppc64le.rpm SHA-256: 8525037ba8eed25b0056897524e84141415acc7c6469cb1af0323cb142541cc9 python3.12-debuginfo-3.12.14-1.el10_2.ppc64le.rpm SHA-256: 94dbbcccceeaa7790c6f854e3a142fbb5a2ddd07e6e01ecaac16085226a78814 python3.12-debuginfo-3.12.14-1.el10_2.ppc64le.rpm SHA-256: 94dbbcccceeaa7790c6f854e3a142fbb5a2ddd07e6e01ecaac16085226a78814 python3.12-debugsource-3.12.14-1.el10_2.ppc64le.rpm SHA-256: dcb9b95503704a39fcb33c5f255cfdab92709f62d75aad87b6588897d15cbfd9 python3.12-debugsource-3.12.14-1.el10_2.ppc64le.rpm SHA-256: dcb9b95503704a39fcb33c5f255cfdab92709f62d75aad87b6588897d15cbfd9 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM python3.12-3.12.14-1.el10_2.src.rpm SHA-256: 6eef0d4db7631742f9b