Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Python 3.9 Needs Security Update Now

published 7 months ago

Summary

Update your Red Hat system's Python 3.9 software to fix a security issue that could allow an attacker to execute malicious code. This update is important to patch a bug that could be exploited by hackers. Apply the update as soon as possible to keep your system secure.

What to do

Update redhat python-unversioned-command to version 0:3.9.10-4.el9_0.9.
Update redhat python3 to version 0:3.9.10-4.el9_0.9.
Update redhat python3-devel to version 0:3.9.10-4.el9_0.9.
Update redhat python3-libs to version 0:3.9.10-4.el9_0.9.
Update redhat python3-tkinter to version 0:3.9.10-4.el9_0.9.
Update redhat python3.9 to version 0:3.9.10-4.el9_0.9.
Update redhat python3.9-debuginfo to version 0:3.9.10-4.el9_0.9.
Update redhat python3.9-debugsource to version 0:3.9.10-4.el9_0.9.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.0::appstream	redhat	python-unversioned-command	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3-devel	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3-libs	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3-tkinter	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3.9	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3.9-debuginfo	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::appstream	redhat	python3.9-debugsource	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python-unversioned-command	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3-devel	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3-libs	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3-tkinter	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3.9	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3.9-debuginfo	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9
Red Hat:rhel_e4s:9.0::baseos	redhat	python3.9-debugsource	< 0:3.9.10-4.el9_0.9 Fix: upgrade to 0:3.9.10-4.el9_0.9

Original advisory text

Red Hat Security Advisory: python3.9 security update

References

https://access.redhat.com/errata/RHSA-2026:5219 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2431368 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2431373 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2432437 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5219.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-15366 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-15366 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-15366 Vendor Advisory
https://github.com/python/cpython/issues/143921 Third Party Advisory
https://github.com/python/cpython/pull/143922 Third Party Advisory
https://mail.python.org/archives/list/[email protected]/thread/DD7C7J... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-15367 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-15367 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-15367 Vendor Advisory
https://github.com/python/cpython/issues/143923 Third Party Advisory
https://github.com/python/cpython/pull/143924 Third Party Advisory
https://mail.python.org/archives/list/[email protected]/thread/CBFBOW... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-1299 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-1299 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-1299 Vendor Advisory
https://cve.org/CVERecord?id=CVE-2024-6923 Third Party Advisory
https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc35941... Third Party Advisory
https://github.com/python/cpython/issues/144125 Third Party Advisory
https://github.com/python/cpython/pull/144126 Third Party Advisory
https://mail.python.org/archives/list/[email protected]/thread/6ZZULG... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.1 High

Timeline

Published23 Mar 2026

Updated23 Mar 2026

First seen23 Mar 2026

Sources

RHSA-2026:5219 · OSV

Track software like this

Free during beta