Red Hat Product Errata RHSA-2026:1893 - Security Advisory
Issued:
2026-02-04
Updated:
2026-02-04

RHSA-2026:1893 - Security Advisory

Synopsis

Moderate: python3.11 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  • cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2418078 - CVE-2025-13836 cpython: Excessive read buffering DoS in http.client
  • BZ - 2418655 - CVE-2025-12084 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
x86_64
python3.11-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: 0e66dd0bf24eb0635275e32947fb488753a891847de73f0593358754b55084fc
python3.11-debuginfo-3.11.7-1.el9_4.10.i686.rpm SHA-256: efd927f89d46072159323635bad3ebfc4c426a57f81d06b8cf960f61f5f80995
python3.11-debuginfo-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: cfaf5477d50fa5c9d2bd76015111e9aa73b037356f382d1f10443cff00638c85
python3.11-debugsource-3.11.7-1.el9_4.10.i686.rpm SHA-256: 6c61f8d93c1981de38dbb7f280a4b666ce3f0640a488ae42a9c3f8789dc3f484
python3.11-debugsource-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: a5cedc9b7874d02ac3eb33bf5fbbd0fba916f853b15d756bf004075d54cc7de1
python3.11-devel-3.11.7-1.el9_4.10.i686.rpm SHA-256: 0fb7b55b93475e03cc65ee596281adfa943c58da4c407e0bf3a0ee628d1ecc2c
python3.11-devel-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: b99f6dc2e09f1c8d8e2be7dbec87a3a4c3c411647af4a70d6edac50119b70818
python3.11-libs-3.11.7-1.el9_4.10.i686.rpm SHA-256: 564ee040700eb6dc492ff7e31bcaadcdb531a7f9ac14f170b8325e9c1c55bcfb
python3.11-libs-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: ac760df67468b7b6a9fa9c7037d02c944415cc6964e8213ce126b3fa8efd50c2
python3.11-tkinter-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: d4ed1f3f9fc5831095bb1c5fc9a3b405dfee9f530e8c95ef29544a5606ea2404

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
x86_64
python3.11-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: 0e66dd0bf24eb0635275e32947fb488753a891847de73f0593358754b55084fc
python3.11-debuginfo-3.11.7-1.el9_4.10.i686.rpm SHA-256: efd927f89d46072159323635bad3ebfc4c426a57f81d06b8cf960f61f5f80995
python3.11-debuginfo-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: cfaf5477d50fa5c9d2bd76015111e9aa73b037356f382d1f10443cff00638c85
python3.11-debugsource-3.11.7-1.el9_4.10.i686.rpm SHA-256: 6c61f8d93c1981de38dbb7f280a4b666ce3f0640a488ae42a9c3f8789dc3f484
python3.11-debugsource-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: a5cedc9b7874d02ac3eb33bf5fbbd0fba916f853b15d756bf004075d54cc7de1
python3.11-devel-3.11.7-1.el9_4.10.i686.rpm SHA-256: 0fb7b55b93475e03cc65ee596281adfa943c58da4c407e0bf3a0ee628d1ecc2c
python3.11-devel-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: b99f6dc2e09f1c8d8e2be7dbec87a3a4c3c411647af4a70d6edac50119b70818
python3.11-libs-3.11.7-1.el9_4.10.i686.rpm SHA-256: 564ee040700eb6dc492ff7e31bcaadcdb531a7f9ac14f170b8325e9c1c55bcfb
python3.11-libs-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: ac760df67468b7b6a9fa9c7037d02c944415cc6964e8213ce126b3fa8efd50c2
python3.11-tkinter-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: d4ed1f3f9fc5831095bb1c5fc9a3b405dfee9f530e8c95ef29544a5606ea2404

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
s390x
python3.11-3.11.7-1.el9_4.10.s390x.rpm SHA-256: be5124eb9b4bf05acdb09773ac675b50055d707baed47359a90c4c49d3da418e
python3.11-debuginfo-3.11.7-1.el9_4.10.s390x.rpm SHA-256: b09ab708e4eea4fb04cf869ddd7bf3ba46e43e8feb4422ca97c1ed11e059db43
python3.11-debugsource-3.11.7-1.el9_4.10.s390x.rpm SHA-256: d5b4f2847f58a16d2bf8d605eed1afe442835fdc6a4c3098abbcca7560fa6de1
python3.11-devel-3.11.7-1.el9_4.10.s390x.rpm SHA-256: 532a908ea1c45a3d08c7a6e22160e5bb4046bd1e2cc6d5f99b309f0a3b2bb91b
python3.11-libs-3.11.7-1.el9_4.10.s390x.rpm SHA-256: 2e774d744fef2b3b082dc88c5831b905122c1f8153e09cc8692d4f1a5b9a488a
python3.11-tkinter-3.11.7-1.el9_4.10.s390x.rpm SHA-256: d248dcd3045a3d06e9d1d8e8831584dee0511a97cc83afea15a6174c35b449fc

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
ppc64le
python3.11-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: b4929f005a3cf6df99afd92258ef226196e1ecbbc3e3b6ef02ac7903661eddc7
python3.11-debuginfo-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 4bdd01b623d53851a1c952413ab302dbb367b19e6f212f5036e152eacefebebe
python3.11-debugsource-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 9c3eb2106299e1822223978952fc3ccfb1273f9de1f486e24a375933a05db8de
python3.11-devel-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 2c5171945ce4ab89cc5192c24fe21d05be72221d8d031de0e053189825ca198c
python3.11-libs-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 17144f906aca73d2faf88434be768f5fec9793cd61d2af248a8bd80bd570b6ec
python3.11-tkinter-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 07cb581017c66433831c54a814b2d8e218267fc313740545e0627dbe4681e8fa

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
aarch64
python3.11-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 0abec18ad134fc83d5cb7a2770c7067b65de402b3dbb6368452717a5a674c8a0
python3.11-debuginfo-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 3036c4adab0fd38a7f317d432cedc45ba1658c910d556a711b75492e13745145
python3.11-debugsource-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 399221d05763dec9e8194b950e6c29a2a4eb208e8233351f0d7d1712335df90e
python3.11-devel-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 6881483868ac1b137a7be42084d35a565cd8bbbd6824b8d4d52479aa34370c13
python3.11-libs-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 1bbd6beb8b0e3571a135de15f8103d949759b2bb77b60d54efa8f890c0cca5b3
python3.11-tkinter-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: a4e594eabf762bda53f3c1b1ae994c73cb6bac77dda3b03a152f7a14f7e24491

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
ppc64le
python3.11-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: b4929f005a3cf6df99afd92258ef226196e1ecbbc3e3b6ef02ac7903661eddc7
python3.11-debuginfo-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 4bdd01b623d53851a1c952413ab302dbb367b19e6f212f5036e152eacefebebe
python3.11-debugsource-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 9c3eb2106299e1822223978952fc3ccfb1273f9de1f486e24a375933a05db8de
python3.11-devel-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 2c5171945ce4ab89cc5192c24fe21d05be72221d8d031de0e053189825ca198c
python3.11-libs-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 17144f906aca73d2faf88434be768f5fec9793cd61d2af248a8bd80bd570b6ec
python3.11-tkinter-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 07cb581017c66433831c54a814b2d8e218267fc313740545e0627dbe4681e8fa

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
x86_64
python3.11-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: 0e66dd0bf24eb0635275e32947fb488753a891847de73f0593358754b55084fc
python3.11-debuginfo-3.11.7-1.el9_4.10.i686.rpm SHA-256: efd927f89d46072159323635bad3ebfc4c426a57f81d06b8cf960f61f5f80995
python3.11-debuginfo-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: cfaf5477d50fa5c9d2bd76015111e9aa73b037356f382d1f10443cff00638c85
python3.11-debugsource-3.11.7-1.el9_4.10.i686.rpm SHA-256: 6c61f8d93c1981de38dbb7f280a4b666ce3f0640a488ae42a9c3f8789dc3f484
python3.11-debugsource-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: a5cedc9b7874d02ac3eb33bf5fbbd0fba916f853b15d756bf004075d54cc7de1
python3.11-devel-3.11.7-1.el9_4.10.i686.rpm SHA-256: 0fb7b55b93475e03cc65ee596281adfa943c58da4c407e0bf3a0ee628d1ecc2c
python3.11-devel-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: b99f6dc2e09f1c8d8e2be7dbec87a3a4c3c411647af4a70d6edac50119b70818
python3.11-libs-3.11.7-1.el9_4.10.i686.rpm SHA-256: 564ee040700eb6dc492ff7e31bcaadcdb531a7f9ac14f170b8325e9c1c55bcfb
python3.11-libs-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: ac760df67468b7b6a9fa9c7037d02c944415cc6964e8213ce126b3fa8efd50c2
python3.11-tkinter-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: d4ed1f3f9fc5831095bb1c5fc9a3b405dfee9f530e8c95ef29544a5606ea2404

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4

SRPM
x86_64
python3.11-3.11.7-1.el9_4.10.i686.rpm SHA-256: aa33d16acf04f90106d601f0a75c17e1536a90c88469439e7491908cbea8ac4a
python3.11-debug-3.11.7-1.el9_4.10.i686.rpm SHA-256: 8acecf0e75ac7a9e8a9952703d718535668136570f67bde61c89cbb37f211016
python3.11-debug-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: 716bf9bc92b981634d64051decc1392645b3152b28f67c0988e88d611a80af33
python3.11-debuginfo-3.11.7-1.el9_4.10.i686.rpm SHA-256: efd927f89d46072159323635bad3ebfc4c426a57f81d06b8cf960f61f5f80995
python3.11-debuginfo-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: cfaf5477d50fa5c9d2bd76015111e9aa73b037356f382d1f10443cff00638c85
python3.11-debugsource-3.11.7-1.el9_4.10.i686.rpm SHA-256: 6c61f8d93c1981de38dbb7f280a4b666ce3f0640a488ae42a9c3f8789dc3f484
python3.11-debugsource-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: a5cedc9b7874d02ac3eb33bf5fbbd0fba916f853b15d756bf004075d54cc7de1
python3.11-idle-3.11.7-1.el9_4.10.i686.rpm SHA-256: bf72b039dee000cc27f0157d57d74dc7733eca5757fbb73388982ab4c0180997
python3.11-idle-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: b5a526c27a097a476af744ef1a14c50b4ca4922ff70aa00ccc17a5fe02fe58a3
python3.11-test-3.11.7-1.el9_4.10.i686.rpm SHA-256: 5dfd79b803a94ff6c6d831b6fb4a313122c925b66661124bfb0f4335e97eb963
python3.11-test-3.11.7-1.el9_4.10.x86_64.rpm SHA-256: 1ae66771c68d86a11d261540b3927bf3aec8572ef7b2880d57b870cbad7418e8
python3.11-tkinter-3.11.7-1.el9_4.10.i686.rpm SHA-256: 3f1cd25715c65577eb3c1a99f3fb11c1afab9d9f66337f4b51f3b0813645321f

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4

SRPM
ppc64le
python3.11-debug-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 2091cc262d4a1b8ef07b4992ea6ed292eb00b6772b1e504a88610953c2d21af7
python3.11-debuginfo-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 4bdd01b623d53851a1c952413ab302dbb367b19e6f212f5036e152eacefebebe
python3.11-debugsource-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 9c3eb2106299e1822223978952fc3ccfb1273f9de1f486e24a375933a05db8de
python3.11-idle-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 9294193d6249e37a6ad13f09179b9d20f05b264330fcc56df4b05658fe490de6
python3.11-test-3.11.7-1.el9_4.10.ppc64le.rpm SHA-256: 63636429f0bd755ea485b11f7adf51944f7c71961cd3d5028999fcb8c540056e

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4

SRPM
s390x
python3.11-debug-3.11.7-1.el9_4.10.s390x.rpm SHA-256: f4836fbac671dc335f8cb6785f6ccbb3d5f5490b832eae87cd3dacae4fc65480
python3.11-debuginfo-3.11.7-1.el9_4.10.s390x.rpm SHA-256: b09ab708e4eea4fb04cf869ddd7bf3ba46e43e8feb4422ca97c1ed11e059db43
python3.11-debugsource-3.11.7-1.el9_4.10.s390x.rpm SHA-256: d5b4f2847f58a16d2bf8d605eed1afe442835fdc6a4c3098abbcca7560fa6de1
python3.11-idle-3.11.7-1.el9_4.10.s390x.rpm SHA-256: 1fc49574630e9b8123233150cf42db377cc9578461c81c1d1dd7bc2a6d2741ec
python3.11-test-3.11.7-1.el9_4.10.s390x.rpm SHA-256: bbd27361d5c43e9922638fad4939ee4899321ada4b6123f15bdab7fff2732899

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4

SRPM
aarch64
python3.11-debug-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 8f453fa2a84ab31bce0f18db98c7ba8d586f3f018572c5ba6877e629a45507e6
python3.11-debuginfo-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 3036c4adab0fd38a7f317d432cedc45ba1658c910d556a711b75492e13745145
python3.11-debugsource-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 399221d05763dec9e8194b950e6c29a2a4eb208e8233351f0d7d1712335df90e
python3.11-idle-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 24a5b3d16678c8986c73f956471ac3f7736bd24a83c560d7b487acb1afa2f68f
python3.11-test-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 3e3c3f177d4603de192f21d46e54722f9e768fd94849f457fc90df6d99dc8498

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
aarch64
python3.11-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 0abec18ad134fc83d5cb7a2770c7067b65de402b3dbb6368452717a5a674c8a0
python3.11-debuginfo-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 3036c4adab0fd38a7f317d432cedc45ba1658c910d556a711b75492e13745145
python3.11-debugsource-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 399221d05763dec9e8194b950e6c29a2a4eb208e8233351f0d7d1712335df90e
python3.11-devel-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 6881483868ac1b137a7be42084d35a565cd8bbbd6824b8d4d52479aa34370c13
python3.11-libs-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: 1bbd6beb8b0e3571a135de15f8103d949759b2bb77b60d54efa8f890c0cca5b3
python3.11-tkinter-3.11.7-1.el9_4.10.aarch64.rpm SHA-256: a4e594eabf762bda53f3c1b1ae994c73cb6bac77dda3b03a152f7a14f7e24491

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
python3.11-3.11.7-1.el9_4.10.src.rpm SHA-256: 22717d7c67b5ea57c865a438e612211e4bf9ef46c86bc5adaa8c5936d024196f
s390x
python3.11-3.11.7-1.el9_4.10.s390x.rpm SHA-256: be5124eb9b4bf05acdb09773ac675b50055d707baed47359a90c4c49d3da418e
python3.11-debuginfo-3.11.7-1.el9_4.10.s390x.rpm SHA-256: b09ab708e4eea4fb04cf869ddd7bf3ba46e43e8feb4422ca97c1ed11e059db43
python3.11-debugsource-3.11.7-1.el9_4.10.s390x.rpm SHA-256: d5b4f2847f58a16d2bf8d605eed1afe442835fdc6a4c3098abbcca7560fa6de1
python3.11-devel-3.11.7-1.el9_4.10.s390x.rpm SHA-256: 532a908ea1c45a3d08c7a6e22160e5bb4046bd1e2cc6d5f99b309f0a3b2bb91b
python3.11-libs-3.11.7-1.el9_4.10.s390x.rpm SHA-256: 2e774d744fef2b3b082dc88c5831b905122c1f8153e09cc8692d4f1a5b9a488a
python3.11-tkinter-3.11.7-1.el9_4.10.s390x.rpm SHA-256: d248dcd3045a3d06e9d1d8e8831584dee0511a97cc83afea15a6174c35b449fc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.