Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Python 3.12 Update Fixes Critical Web Browser Hijacking Risk
published 7 months ago
Summary
A security update is available for Python 3.12 to prevent malicious websites from hijacking your computer's web browser by injecting malicious commands. This update is important to install to protect your system from potential harm. You should update your Python installation as soon as possible to ensure you have the latest security patches.
What to do
- Update almalinux python3.12 to version 3.12.12-4.el9_7.2.
- Update almalinux python3.12-debug to version 3.12.12-4.el9_7.2.
- Update almalinux python3.12-devel to version 3.12.12-4.el9_7.2.
- Update almalinux python3.12-idle to version 3.12.12-4.el9_7.2.
- Update almalinux python3.12-libs to version 3.12.12-4.el9_7.2.
- Update almalinux python3.12-test to version 3.12.12-4.el9_7.2.
- Update almalinux python3.12-tkinter to version 3.12.12-4.el9_7.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:9 | almalinux | python3.12 |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
| AlmaLinux:9 | almalinux | python3.12-debug |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
| AlmaLinux:9 | almalinux | python3.12-devel |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
| AlmaLinux:9 | almalinux | python3.12-idle |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
| AlmaLinux:9 | almalinux | python3.12-libs |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
| AlmaLinux:9 | almalinux | python3.12-test |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
| AlmaLinux:9 | almalinux | python3.12-tkinter |
< 3.12.12-4.el9_7.2 Fix: upgrade to 3.12.12-4.el9_7.2
|
Original advisory text
Important: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:6285 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-4519 Third Party Advisory
- https://bugzilla.redhat.com/2449649 Third Party Advisory
- https://errata.almalinux.org/9/ALSA-2026-6285.html Vendor Advisory
Timeline
Published31 Mar 2026
Updated3 Apr 2026
First seen3 Apr 2026
Sources
ALSA-2026:6285 · OSV
Track software like this
Free during beta