Red Hat Product Errata RHSA-2026:1374 - Security Advisory
Issued:
2026-01-27
Updated:
2026-01-27

RHSA-2026:1374 - Security Advisory

Synopsis

Moderate: python3.11 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  • cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2418078 - CVE-2025-13836 cpython: Excessive read buffering DoS in http.client
  • BZ - 2418655 - CVE-2025-12084 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

Red Hat Enterprise Linux for x86_64 8

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
x86_64
python3.11-3.11.13-4.el8_10.x86_64.rpm SHA-256: 71e3bb071975ca5fee25feab7f2d15157b1bfe103013638a819bb386438ebb28
python3.11-debuginfo-3.11.13-4.el8_10.i686.rpm SHA-256: a418db297bec9489904e54cbdf2990123009e3ff95aedf30f44dcc9fb2545c72
python3.11-debuginfo-3.11.13-4.el8_10.x86_64.rpm SHA-256: 4703fcfcc4b147cd36482764391d5e3570ca30fb2774d2c4452f7688ff71d42a
python3.11-debugsource-3.11.13-4.el8_10.i686.rpm SHA-256: 80f8b3801ce9110affb2e537a1b534724bcc66e553cb57ec96a2144297647f6b
python3.11-debugsource-3.11.13-4.el8_10.x86_64.rpm SHA-256: 17838fced6e5bb1a0ca3830abfc055b9ed929c999c4622e45c9bd6d55b104405
python3.11-devel-3.11.13-4.el8_10.i686.rpm SHA-256: d3e537cf8e2bd7d7c14fbf4c6f03d8c8a268e01914509f1e244b547a2336c0dd
python3.11-devel-3.11.13-4.el8_10.x86_64.rpm SHA-256: a47eb535707351b06420daa26ea04980b974035008f545fd5c2bdd850a3cc3ed
python3.11-libs-3.11.13-4.el8_10.i686.rpm SHA-256: 72f5d7679b140b97cf911f74a73d987a421d68a2142a0b29735dcb588bfd3981
python3.11-libs-3.11.13-4.el8_10.x86_64.rpm SHA-256: df98e2b230de6bb25159db00fac748819afba5af893012ea0b729738afbeae3f
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.x86_64.rpm SHA-256: 15e601b99c3258a0ca6a7077c92db4793f6bad44b505721e2bad3e3ac3a745c0

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
s390x
python3.11-3.11.13-4.el8_10.s390x.rpm SHA-256: cdda6725d7334a4027dadb24d5b05efa1084e7dbc39d8df06ce5832d969a8c46
python3.11-debuginfo-3.11.13-4.el8_10.s390x.rpm SHA-256: a96f430a802675def0f0a0bac07c3c26563e60a9e489b0352259dd2c876b042d
python3.11-debugsource-3.11.13-4.el8_10.s390x.rpm SHA-256: a3a3f3fed26e4f489806aea80f4bb77e055f5affbde07d0606ee613d724c40bf
python3.11-devel-3.11.13-4.el8_10.s390x.rpm SHA-256: c1b1aa74fb10f9ffb9239e04fd2851ae55358002a526347a117ee4de305f3bed
python3.11-libs-3.11.13-4.el8_10.s390x.rpm SHA-256: aa08849f80236526badd8a3695d82ae1efa94a79e4985e9b6d05f1ce5d57f2c4
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.s390x.rpm SHA-256: ca981095fce3ad6a1423e96699be12b1aaff47fd1f23879bbb5e3690999f946e

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
ppc64le
python3.11-3.11.13-4.el8_10.ppc64le.rpm SHA-256: c81b27c2251052daed6cb723fd9575485ceb306f8604573c2822c5a70a0d16c8
python3.11-debuginfo-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 0f69653be4a1e8552e2036d7cf5fe2b7ec7916c9bccba04d4928d95d5a395fd1
python3.11-debugsource-3.11.13-4.el8_10.ppc64le.rpm SHA-256: adf5ebfd1a8a6a3d5831e69c6caffb47fb2fb0b8a64b028008886cfc7cb5247e
python3.11-devel-3.11.13-4.el8_10.ppc64le.rpm SHA-256: d550339075ee574e868a58268d6de785ab391eb33abf3f11fe55d7df005e2c16
python3.11-libs-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 50f22c19bad9fde2a0577dab763f506744ecd45773a92fcf495c88993803e909
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.ppc64le.rpm SHA-256: fc225bf48aae8a33b1cac5471c554f0664dde6f0181542e4982e92696c782ecb

Red Hat Enterprise Linux for ARM 64 8

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
aarch64
python3.11-3.11.13-4.el8_10.aarch64.rpm SHA-256: ea1734d27d354d108c3a00858e5e6a88f28c09af73f01d4989b8bb9ec1cd5bc8
python3.11-debuginfo-3.11.13-4.el8_10.aarch64.rpm SHA-256: 25e8cacfd56ab20f210b23d5c96911bcb2b73c2f0af1a895c3f07d20812cfde4
python3.11-debugsource-3.11.13-4.el8_10.aarch64.rpm SHA-256: 13b10f90f68c1659fcd38193c24f6a25d606528ffd845259b270f5879e98b6fe
python3.11-devel-3.11.13-4.el8_10.aarch64.rpm SHA-256: 942b45b1b24fc8c5ca95475eee585f0af32bded98f7475084b46a35bfb7c8182
python3.11-libs-3.11.13-4.el8_10.aarch64.rpm SHA-256: b3d4536e690843d7641a68031138652ac3b00b974b7aa3d744107579366f53f5
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.aarch64.rpm SHA-256: 57b6aa4fd9e2ea5edfe02683a6157a7ef2ac7ce56dc4d5a1a75203689907a01f

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
python3.11-3.11.13-4.el8_10.i686.rpm SHA-256: 797354d81ca3992a337997fff9f4ef573ff2566258caf862ee7542db61bb8c14
python3.11-debug-3.11.13-4.el8_10.i686.rpm SHA-256: 9404bbac2bf59b40f46959e1bb2c1396d108bab96d6303921b2f58855ed5a8ce
python3.11-debug-3.11.13-4.el8_10.x86_64.rpm SHA-256: 3fd58f969ef2e6e08441b13eec219afc86344bb84c1650d38c091af18bccc19d
python3.11-debuginfo-3.11.13-4.el8_10.i686.rpm SHA-256: a418db297bec9489904e54cbdf2990123009e3ff95aedf30f44dcc9fb2545c72
python3.11-debuginfo-3.11.13-4.el8_10.x86_64.rpm SHA-256: 4703fcfcc4b147cd36482764391d5e3570ca30fb2774d2c4452f7688ff71d42a
python3.11-debugsource-3.11.13-4.el8_10.i686.rpm SHA-256: 80f8b3801ce9110affb2e537a1b534724bcc66e553cb57ec96a2144297647f6b
python3.11-debugsource-3.11.13-4.el8_10.x86_64.rpm SHA-256: 17838fced6e5bb1a0ca3830abfc055b9ed929c999c4622e45c9bd6d55b104405
python3.11-idle-3.11.13-4.el8_10.i686.rpm SHA-256: 83e6637b236f17dd1fe9b7f4deeb4c467403f5e7c4360daca4faf15491d1a129
python3.11-idle-3.11.13-4.el8_10.x86_64.rpm SHA-256: 9698074e4fe6304a3676da793d45ea9f83dcf96436d0507ecf0cab76918047fb
python3.11-test-3.11.13-4.el8_10.i686.rpm SHA-256: 266b06786ff1aad3671f6c1b86a43d704218cd937539226fd7fcdd80ed225eb5
python3.11-test-3.11.13-4.el8_10.x86_64.rpm SHA-256: 203951a5853533168a305b1ef59abbf7bc875555cc82066a3f39c50d81bf3254
python3.11-tkinter-3.11.13-4.el8_10.i686.rpm SHA-256: 9911b0f782a024816b15cad865fcccab6419cec7cf489f81f4637c4c9016cb29

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
python3.11-debug-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 960c2ee22ec200cf91f5cb4be2b4034304176ac211f7ded00e0e436848652b7a
python3.11-debuginfo-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 0f69653be4a1e8552e2036d7cf5fe2b7ec7916c9bccba04d4928d95d5a395fd1
python3.11-debugsource-3.11.13-4.el8_10.ppc64le.rpm SHA-256: adf5ebfd1a8a6a3d5831e69c6caffb47fb2fb0b8a64b028008886cfc7cb5247e
python3.11-idle-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 65460135335ebecb35fdd7515f77c78735efbe4cc0df8d2cd84851bc54f64b96
python3.11-test-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 6832129dd70bf8cec10ad96393bb9b7609f142b72c772aa2203d47e448778402

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
python3.11-debug-3.11.13-4.el8_10.aarch64.rpm SHA-256: b044aeed66276a9bf86ec3cc676e603d816f0e971413d13080ee7758e8229473
python3.11-debuginfo-3.11.13-4.el8_10.aarch64.rpm SHA-256: 25e8cacfd56ab20f210b23d5c96911bcb2b73c2f0af1a895c3f07d20812cfde4
python3.11-debugsource-3.11.13-4.el8_10.aarch64.rpm SHA-256: 13b10f90f68c1659fcd38193c24f6a25d606528ffd845259b270f5879e98b6fe
python3.11-idle-3.11.13-4.el8_10.aarch64.rpm SHA-256: 78ac8826b76bbd2a6b03fe91dffa1678d82daad590330239ccab6964c007c47e
python3.11-test-3.11.13-4.el8_10.aarch64.rpm SHA-256: 99c32ad45c5f98080030e197c709fa205a4b9c2212e9b43f282df678e055a383

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
python3.11-debug-3.11.13-4.el8_10.s390x.rpm SHA-256: 8a589e11865e43175797709d222a01f50655c61ac1a72425b5541ae7c83dac8d
python3.11-debuginfo-3.11.13-4.el8_10.s390x.rpm SHA-256: a96f430a802675def0f0a0bac07c3c26563e60a9e489b0352259dd2c876b042d
python3.11-debugsource-3.11.13-4.el8_10.s390x.rpm SHA-256: a3a3f3fed26e4f489806aea80f4bb77e055f5affbde07d0606ee613d724c40bf
python3.11-idle-3.11.13-4.el8_10.s390x.rpm SHA-256: 07fb60a775e2558a71e86354a692d6c69ccc5809bd51ac78f2b2a35be3370d86
python3.11-test-3.11.13-4.el8_10.s390x.rpm SHA-256: aeeaa4b44b5fee6ec564597914b0f38345b4ff34339c4005043fa05c93e1908f

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
x86_64
python3.11-3.11.13-4.el8_10.x86_64.rpm SHA-256: 71e3bb071975ca5fee25feab7f2d15157b1bfe103013638a819bb386438ebb28
python3.11-debuginfo-3.11.13-4.el8_10.i686.rpm SHA-256: a418db297bec9489904e54cbdf2990123009e3ff95aedf30f44dcc9fb2545c72
python3.11-debuginfo-3.11.13-4.el8_10.x86_64.rpm SHA-256: 4703fcfcc4b147cd36482764391d5e3570ca30fb2774d2c4452f7688ff71d42a
python3.11-debugsource-3.11.13-4.el8_10.i686.rpm SHA-256: 80f8b3801ce9110affb2e537a1b534724bcc66e553cb57ec96a2144297647f6b
python3.11-debugsource-3.11.13-4.el8_10.x86_64.rpm SHA-256: 17838fced6e5bb1a0ca3830abfc055b9ed929c999c4622e45c9bd6d55b104405
python3.11-devel-3.11.13-4.el8_10.i686.rpm SHA-256: d3e537cf8e2bd7d7c14fbf4c6f03d8c8a268e01914509f1e244b547a2336c0dd
python3.11-devel-3.11.13-4.el8_10.x86_64.rpm SHA-256: a47eb535707351b06420daa26ea04980b974035008f545fd5c2bdd850a3cc3ed
python3.11-libs-3.11.13-4.el8_10.i686.rpm SHA-256: 72f5d7679b140b97cf911f74a73d987a421d68a2142a0b29735dcb588bfd3981
python3.11-libs-3.11.13-4.el8_10.x86_64.rpm SHA-256: df98e2b230de6bb25159db00fac748819afba5af893012ea0b729738afbeae3f
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.x86_64.rpm SHA-256: 15e601b99c3258a0ca6a7077c92db4793f6bad44b505721e2bad3e3ac3a745c0

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
aarch64
python3.11-3.11.13-4.el8_10.aarch64.rpm SHA-256: ea1734d27d354d108c3a00858e5e6a88f28c09af73f01d4989b8bb9ec1cd5bc8
python3.11-debuginfo-3.11.13-4.el8_10.aarch64.rpm SHA-256: 25e8cacfd56ab20f210b23d5c96911bcb2b73c2f0af1a895c3f07d20812cfde4
python3.11-debugsource-3.11.13-4.el8_10.aarch64.rpm SHA-256: 13b10f90f68c1659fcd38193c24f6a25d606528ffd845259b270f5879e98b6fe
python3.11-devel-3.11.13-4.el8_10.aarch64.rpm SHA-256: 942b45b1b24fc8c5ca95475eee585f0af32bded98f7475084b46a35bfb7c8182
python3.11-libs-3.11.13-4.el8_10.aarch64.rpm SHA-256: b3d4536e690843d7641a68031138652ac3b00b974b7aa3d744107579366f53f5
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.aarch64.rpm SHA-256: 57b6aa4fd9e2ea5edfe02683a6157a7ef2ac7ce56dc4d5a1a75203689907a01f

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
ppc64le
python3.11-3.11.13-4.el8_10.ppc64le.rpm SHA-256: c81b27c2251052daed6cb723fd9575485ceb306f8604573c2822c5a70a0d16c8
python3.11-debuginfo-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 0f69653be4a1e8552e2036d7cf5fe2b7ec7916c9bccba04d4928d95d5a395fd1
python3.11-debugsource-3.11.13-4.el8_10.ppc64le.rpm SHA-256: adf5ebfd1a8a6a3d5831e69c6caffb47fb2fb0b8a64b028008886cfc7cb5247e
python3.11-devel-3.11.13-4.el8_10.ppc64le.rpm SHA-256: d550339075ee574e868a58268d6de785ab391eb33abf3f11fe55d7df005e2c16
python3.11-libs-3.11.13-4.el8_10.ppc64le.rpm SHA-256: 50f22c19bad9fde2a0577dab763f506744ecd45773a92fcf495c88993803e909
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.ppc64le.rpm SHA-256: fc225bf48aae8a33b1cac5471c554f0664dde6f0181542e4982e92696c782ecb

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-4.el8_10.src.rpm SHA-256: f7b159edb3b04194acc622e6368f049d2ce2961f08f96c6f4d76f8237c823cb5
s390x
python3.11-3.11.13-4.el8_10.s390x.rpm SHA-256: cdda6725d7334a4027dadb24d5b05efa1084e7dbc39d8df06ce5832d969a8c46
python3.11-debuginfo-3.11.13-4.el8_10.s390x.rpm SHA-256: a96f430a802675def0f0a0bac07c3c26563e60a9e489b0352259dd2c876b042d
python3.11-debugsource-3.11.13-4.el8_10.s390x.rpm SHA-256: a3a3f3fed26e4f489806aea80f4bb77e055f5affbde07d0606ee613d724c40bf
python3.11-devel-3.11.13-4.el8_10.s390x.rpm SHA-256: c1b1aa74fb10f9ffb9239e04fd2851ae55358002a526347a117ee4de305f3bed
python3.11-libs-3.11.13-4.el8_10.s390x.rpm SHA-256: aa08849f80236526badd8a3695d82ae1efa94a79e4985e9b6d05f1ce5d57f2c4
python3.11-rpm-macros-3.11.13-4.el8_10.noarch.rpm SHA-256: c63505ba7478d4c50a684cf38c26f381373bb204df0810701ec46540d3985d5b
python3.11-tkinter-3.11.13-4.el8_10.s390x.rpm SHA-256: ca981095fce3ad6a1423e96699be12b1aaff47fd1f23879bbb5e3690999f946e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.