Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Python S3 Transfer Tool Security Update for Linux
published 8 months ago
Summary
The Python S3 transfer tool for Linux has a security issue that could allow an attacker to potentially execute code on your system. This issue affects Linux systems running certain versions of the Python S3 transfer tool. To fix this, update your system to the latest version of the tool.
What to do
- Update redhat python-s3transfer to version 0:0.1.13-1.el7_9.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:7::server | redhat | python-s3transfer |
< 0:0.1.13-1.el7_9.6 Fix: upgrade to 0:0.1.13-1.el7_9.6
|
Original advisory text
Red Hat Security Advisory: python-s3transfer security update
References
- https://access.redhat.com/errata/RHSA-2026:2911 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2427726 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2911.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-21441 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-21441 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-21441 Vendor Advisory
- https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc... Third Party Advisory
- https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published19 Feb 2026
Updated7 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2026:2911 · OSV
Track software like this
Free during beta