Red Hat Product Errata RHSA-2026:0353 - Security Advisory
Issued:
2026-01-08
Updated:
2026-01-08

RHSA-2026:0353 - Security Advisory

Synopsis

Moderate: python3.12 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.12 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2402342 - CVE-2025-8291 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
x86_64
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 228c7227b9b4671cb39d0f5045278b67fd319e7e137ac7fbfe4c7e10d5c69933
python3-devel-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 6aaf90f3a5f400fec8565eb8130b595617a150afa81ba3ce0d432560731ce76e
python3-libs-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 97f1985055fd536d8c4205f57f5c80ee943c40c39abfa00590ed45e9f63922db
python3-tkinter-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 37b9898257771200b2753d7f62f07d7aa42bff376d9f36e28aa74dd0dad1dadd
python3.12-debuginfo-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 5e75cae4c974ceb6b9fd62c6541d30c42ff18c7f9722931a6301052f8d92395d
python3.12-debuginfo-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 5e75cae4c974ceb6b9fd62c6541d30c42ff18c7f9722931a6301052f8d92395d
python3.12-debugsource-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 721db19f20952a8a60fb0e1c6bc35f8a50aa34202a8e7ceb7c865d16ee90138c
python3.12-debugsource-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 721db19f20952a8a60fb0e1c6bc35f8a50aa34202a8e7ceb7c865d16ee90138c

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
s390x
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 160824e965810d33d9922faf1186fcd994db483f9465a1d809788c750a319870
python3-devel-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 992bf76c8445c39a275f23f7492eafb2c2d81fc175b1be56cc2fd5486ec116ba
python3-libs-3.12.9-2.el10_0.4.s390x.rpm SHA-256: e9fd32602ec2aa9f4fa71b0c5f5bda9bb871db0ee699c121d3e2289944eac3c1
python3-tkinter-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 92efff988fa0febeff6d06395285187ecab53a54d7cde353c52a574315d34e8a
python3.12-debuginfo-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 24c13199520cc684bb27a4f70d34c8852a165ff56c1ddb557bda028c77b8ace4
python3.12-debuginfo-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 24c13199520cc684bb27a4f70d34c8852a165ff56c1ddb557bda028c77b8ace4
python3.12-debugsource-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 8152feb8dab9583891ce05b73d1b2bd25f1ffaa2e49c00143d63af1d0cb33020
python3.12-debugsource-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 8152feb8dab9583891ce05b73d1b2bd25f1ffaa2e49c00143d63af1d0cb33020

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
ppc64le
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: a109d6a8f78317788778404e5034a87f470f6006285269260452c9f2ec9db343
python3-devel-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 903a85f32e4ee9b305e3e4fbf29733f95b8e2ec9b0a74ea48ceeef05aec2201c
python3-libs-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: de24d67e8c868fd21cd544b98eb3c5581a7dbb1e8bbc980b1419418083dda090
python3-tkinter-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 79a494681421622f908dbde2546d4ab163a9db2aed90f98c7687f20d617a5da3
python3.12-debuginfo-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 96c2cd1b6cbabb9f639a17dd49db516782f77a0f0b28291b425ba3ff58241855
python3.12-debuginfo-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 96c2cd1b6cbabb9f639a17dd49db516782f77a0f0b28291b425ba3ff58241855
python3.12-debugsource-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 801643b08953bd475226a58d57efbe164bc9973229f7262af22dcac531aa11bb
python3.12-debugsource-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 801643b08953bd475226a58d57efbe164bc9973229f7262af22dcac531aa11bb

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
aarch64
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 4f6cce110ffce9ee7f89a9fefc00b3595e13eeb5835689c8755c633940287e56
python3-devel-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: a374dc532fe1bb4e967e2e8d282e4be8ebd920dbd1d9f5bce1ea8b4a9d721106
python3-libs-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: a7962f7070b7dc3d6272982eb8aa9c860f2db5169e18424511f3e0a439a0e04f
python3-tkinter-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 6c0908265e51b6e41dc9a4ad49f3f504a1f21503cffe1242d76e43ecfe3b0c56
python3.12-debuginfo-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 0c41749d52044a49c324beef3de486502f31516c47fbb94f35cca3b57b6b0cf5
python3.12-debuginfo-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 0c41749d52044a49c324beef3de486502f31516c47fbb94f35cca3b57b6b0cf5
python3.12-debugsource-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 14c0c02473bd72feaef6b9afe0aa522dbd30c69f86b9fe41a74b7868ff479529
python3.12-debugsource-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 14c0c02473bd72feaef6b9afe0aa522dbd30c69f86b9fe41a74b7868ff479529

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
python3-debug-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: bebb6a4c87778c188bd32afa38de727cd344c954d8dee1c284fdba4462edd9d7
python3-idle-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 6fb54ee90769237968abd0eb5d65064f306964a37d46db9f19fae599b10b7f9c
python3-test-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 25f5c4debf69e71e4fd318bbb80b618d749ed09cca61d3844fefd5b08e6f8750
python3.12-debuginfo-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 5e75cae4c974ceb6b9fd62c6541d30c42ff18c7f9722931a6301052f8d92395d
python3.12-debugsource-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 721db19f20952a8a60fb0e1c6bc35f8a50aa34202a8e7ceb7c865d16ee90138c

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
python3-debug-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: e436318f311ddb07a2f9a069c4df3f012d25dd45c02ad78b82b86922f0ea149e
python3-idle-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: fd3c0f686a6acfa33eb43270e4b1d06919b690d8e98de2ac32dab73c8c3a3eec
python3-test-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: b6e9d43705caf94c4781a2d45cbba25ff0eeb3c1e1c34c2fdae529a23bbdc635
python3.12-debuginfo-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 96c2cd1b6cbabb9f639a17dd49db516782f77a0f0b28291b425ba3ff58241855
python3.12-debugsource-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 801643b08953bd475226a58d57efbe164bc9973229f7262af22dcac531aa11bb

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
python3-debug-3.12.9-2.el10_0.4.s390x.rpm SHA-256: e4ee93315054543f3f6c90d28e9fb37c60c7b9d461355a137cc15829afd3690e
python3-idle-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 8300828601e0abc1a6913e1f0a2545b4c2be5cd793f25aec349227a39b1f9466
python3-test-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 6922235f3ddbe2803770f1c224ff3d339499776fc272b2d48024492df1c1a34c
python3.12-debuginfo-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 24c13199520cc684bb27a4f70d34c8852a165ff56c1ddb557bda028c77b8ace4
python3.12-debugsource-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 8152feb8dab9583891ce05b73d1b2bd25f1ffaa2e49c00143d63af1d0cb33020

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
python3-debug-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: f66b481577ccca09dd47eb80a8e0125bd877f427c81128dc5807e1d3bfad1650
python3-idle-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 625e6639821d012053ff9b1c7be9509e97042302b60fad6d1a2e3f512dff1ea4
python3-test-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 114c27c2c4ec3a9cc9f854f744307f74e719c49fd2d8726f46886b2f4ed17a70
python3.12-debuginfo-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 0c41749d52044a49c324beef3de486502f31516c47fbb94f35cca3b57b6b0cf5
python3.12-debugsource-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 14c0c02473bd72feaef6b9afe0aa522dbd30c69f86b9fe41a74b7868ff479529

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
aarch64
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 4f6cce110ffce9ee7f89a9fefc00b3595e13eeb5835689c8755c633940287e56
python3-devel-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: a374dc532fe1bb4e967e2e8d282e4be8ebd920dbd1d9f5bce1ea8b4a9d721106
python3-libs-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: a7962f7070b7dc3d6272982eb8aa9c860f2db5169e18424511f3e0a439a0e04f
python3-tkinter-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 6c0908265e51b6e41dc9a4ad49f3f504a1f21503cffe1242d76e43ecfe3b0c56
python3.12-debuginfo-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 0c41749d52044a49c324beef3de486502f31516c47fbb94f35cca3b57b6b0cf5
python3.12-debuginfo-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 0c41749d52044a49c324beef3de486502f31516c47fbb94f35cca3b57b6b0cf5
python3.12-debugsource-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 14c0c02473bd72feaef6b9afe0aa522dbd30c69f86b9fe41a74b7868ff479529
python3.12-debugsource-3.12.9-2.el10_0.4.aarch64.rpm SHA-256: 14c0c02473bd72feaef6b9afe0aa522dbd30c69f86b9fe41a74b7868ff479529

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
s390x
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 160824e965810d33d9922faf1186fcd994db483f9465a1d809788c750a319870
python3-devel-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 992bf76c8445c39a275f23f7492eafb2c2d81fc175b1be56cc2fd5486ec116ba
python3-libs-3.12.9-2.el10_0.4.s390x.rpm SHA-256: e9fd32602ec2aa9f4fa71b0c5f5bda9bb871db0ee699c121d3e2289944eac3c1
python3-tkinter-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 92efff988fa0febeff6d06395285187ecab53a54d7cde353c52a574315d34e8a
python3.12-debuginfo-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 24c13199520cc684bb27a4f70d34c8852a165ff56c1ddb557bda028c77b8ace4
python3.12-debuginfo-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 24c13199520cc684bb27a4f70d34c8852a165ff56c1ddb557bda028c77b8ace4
python3.12-debugsource-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 8152feb8dab9583891ce05b73d1b2bd25f1ffaa2e49c00143d63af1d0cb33020
python3.12-debugsource-3.12.9-2.el10_0.4.s390x.rpm SHA-256: 8152feb8dab9583891ce05b73d1b2bd25f1ffaa2e49c00143d63af1d0cb33020

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
ppc64le
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: a109d6a8f78317788778404e5034a87f470f6006285269260452c9f2ec9db343
python3-devel-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 903a85f32e4ee9b305e3e4fbf29733f95b8e2ec9b0a74ea48ceeef05aec2201c
python3-libs-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: de24d67e8c868fd21cd544b98eb3c5581a7dbb1e8bbc980b1419418083dda090
python3-tkinter-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 79a494681421622f908dbde2546d4ab163a9db2aed90f98c7687f20d617a5da3
python3.12-debuginfo-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 96c2cd1b6cbabb9f639a17dd49db516782f77a0f0b28291b425ba3ff58241855
python3.12-debuginfo-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 96c2cd1b6cbabb9f639a17dd49db516782f77a0f0b28291b425ba3ff58241855
python3.12-debugsource-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 801643b08953bd475226a58d57efbe164bc9973229f7262af22dcac531aa11bb
python3.12-debugsource-3.12.9-2.el10_0.4.ppc64le.rpm SHA-256: 801643b08953bd475226a58d57efbe164bc9973229f7262af22dcac531aa11bb

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
python3.12-3.12.9-2.el10_0.4.src.rpm SHA-256: 05df151b4e446d9f8f5a98a67dcf512c2b33acc0cc3736523f8bc1922acad04b
x86_64
python-unversioned-command-3.12.9-2.el10_0.4.noarch.rpm SHA-256: fc479b6462b90bc96d260023a9b36de4205c24913bf0df02a4e86371820b02d8
python3-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 228c7227b9b4671cb39d0f5045278b67fd319e7e137ac7fbfe4c7e10d5c69933
python3-devel-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 6aaf90f3a5f400fec8565eb8130b595617a150afa81ba3ce0d432560731ce76e
python3-libs-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 97f1985055fd536d8c4205f57f5c80ee943c40c39abfa00590ed45e9f63922db
python3-tkinter-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 37b9898257771200b2753d7f62f07d7aa42bff376d9f36e28aa74dd0dad1dadd
python3.12-debuginfo-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 5e75cae4c974ceb6b9fd62c6541d30c42ff18c7f9722931a6301052f8d92395d
python3.12-debuginfo-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 5e75cae4c974ceb6b9fd62c6541d30c42ff18c7f9722931a6301052f8d92395d
python3.12-debugsource-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 721db19f20952a8a60fb0e1c6bc35f8a50aa34202a8e7ceb7c865d16ee90138c
python3.12-debugsource-3.12.9-2.el10_0.4.x86_64.rpm SHA-256: 721db19f20952a8a60fb0e1c6bc35f8a50aa34202a8e7ceb7c865d16ee90138c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.