Red Hat Product Errata RHSA-2026:3897 - Security Advisory
Issued:
2026-03-05
Updated:
2026-03-05

RHSA-2026:3897 - Security Advisory

Synopsis

Moderate: python3.12 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.12 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2418078 - CVE-2025-13836 cpython: Excessive read buffering DoS in http.client

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
x86_64
python3.12-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 91984c97df26ea2031881de4d61b6460d66bc3049c3d004652e5d743f99851b9
python3.12-debuginfo-3.12.1-4.el9_4.10.i686.rpm SHA-256: 8d7d34a42f53c0297bb5b1b3f59e6b7c3baeb45877b4950fcf678c5a6abf006e
python3.12-debuginfo-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: c1b88a6334a1af71b4973c050bb5854262865239a62717ab8015237bf92de2b4
python3.12-debugsource-3.12.1-4.el9_4.10.i686.rpm SHA-256: 0ef9aa6aef6dcbdb354d763fd37ce1488dbc747d3a7f86323903d99913c12a93
python3.12-debugsource-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 34a2f9d5c19c7b926b65d4fc06b2a92c6c89b78f0df994721594b5ca0c09d3e9
python3.12-devel-3.12.1-4.el9_4.10.i686.rpm SHA-256: 666e5fa4de4b545cb59e1b0b68dd2099ebe30cff6b90ffd8615b0f76a537999b
python3.12-devel-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: e9094c9d15b2ddec0a66fe266383c299830d380d33161d3c1bd0d567868934bd
python3.12-libs-3.12.1-4.el9_4.10.i686.rpm SHA-256: 9d2ffcbfa0d48c2322edc14fc5a006a785f62abfd5b20f6bc75e1b31c6293fa6
python3.12-libs-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 9dceb92955c027ed9e13583ac2db7483b4421bb77120206e04ccd9d3508d7020
python3.12-tkinter-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 94798118446759cdba877efb0b966071b03d6e7c0938987f71fe52a48d12d0b3

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
x86_64
python3.12-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 91984c97df26ea2031881de4d61b6460d66bc3049c3d004652e5d743f99851b9
python3.12-debuginfo-3.12.1-4.el9_4.10.i686.rpm SHA-256: 8d7d34a42f53c0297bb5b1b3f59e6b7c3baeb45877b4950fcf678c5a6abf006e
python3.12-debuginfo-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: c1b88a6334a1af71b4973c050bb5854262865239a62717ab8015237bf92de2b4
python3.12-debugsource-3.12.1-4.el9_4.10.i686.rpm SHA-256: 0ef9aa6aef6dcbdb354d763fd37ce1488dbc747d3a7f86323903d99913c12a93
python3.12-debugsource-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 34a2f9d5c19c7b926b65d4fc06b2a92c6c89b78f0df994721594b5ca0c09d3e9
python3.12-devel-3.12.1-4.el9_4.10.i686.rpm SHA-256: 666e5fa4de4b545cb59e1b0b68dd2099ebe30cff6b90ffd8615b0f76a537999b
python3.12-devel-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: e9094c9d15b2ddec0a66fe266383c299830d380d33161d3c1bd0d567868934bd
python3.12-libs-3.12.1-4.el9_4.10.i686.rpm SHA-256: 9d2ffcbfa0d48c2322edc14fc5a006a785f62abfd5b20f6bc75e1b31c6293fa6
python3.12-libs-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 9dceb92955c027ed9e13583ac2db7483b4421bb77120206e04ccd9d3508d7020
python3.12-tkinter-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 94798118446759cdba877efb0b966071b03d6e7c0938987f71fe52a48d12d0b3

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
s390x
python3.12-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 3640612d1ebd595eba474e569136a689ab20a931bd00f8176646315992179bf0
python3.12-debuginfo-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 91ab33c11353112c803f9766818d4c93f244264c06a96da6a0085e9d039ae7ef
python3.12-debugsource-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 8c650b93a87eb6b85a9b9205ba954493827c5aafaa6c30e17244a14e05edee0a
python3.12-devel-3.12.1-4.el9_4.10.s390x.rpm SHA-256: af98942c5cd854b361b84e10c03cf8d8180675bc0c133c0b20414cf1104bb6ba
python3.12-libs-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 76eeb83694cb11ef0fa52b552019815310eea25809a9137a3db2c51b0cba2ffa
python3.12-tkinter-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 23721ea21c6bc5c6f413bc6ee366cb9ab68f226e615d1b60fb1201d3925a5f5e

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
ppc64le
python3.12-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 77285b4bb447d52124270dd68fe142eacad55ad02350059678642560d2dcbe69
python3.12-debuginfo-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 3fe6ec8fc9e62ce70358e79202dc44ec7d8450cf4050f652a0f7131572d5487d
python3.12-debugsource-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 7144556a21f436719ee4d2cacf1f1473d435ee450fc9eba73f7be55c63e16865
python3.12-devel-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: b633b86c7a1aa21e56c508b28c8085101c7bf015029039ff2819e545d622b489
python3.12-libs-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 523523f288c771ccc894d324ed34c4c35d545cae7e95628d5b0d0cfeb0d64231
python3.12-tkinter-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: fd981a71dd3781aabf13ba8f6c014c30ac50ac6d6c7aaba88972c3e6e5bb2dbc

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
aarch64
python3.12-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 504eec39601b716b2b45bc9a2d070159bce9ef00cf06b9e85eeb87707aa15cd0
python3.12-debuginfo-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 08e42952e8812801cf32017995c5a06039e9769ed7fd26cace9aeac64999fd0a
python3.12-debugsource-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: def39b797e8da2d8881383ed72ed25e37593982e0bb60cde8917f7bc8d2fd85e
python3.12-devel-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 26c8990c38306cb481e2315b972d5a4b01255027b45e3fff4d0c41ae5ff80fef
python3.12-libs-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 346b20fabb5a7e1b739b493ac422138961fa60eb407038c4593b645f28d3f39b
python3.12-tkinter-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 8033ca489a03901acc781ccd695f48e77f9e385ac0923abf62a7250930532ed4

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
ppc64le
python3.12-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 77285b4bb447d52124270dd68fe142eacad55ad02350059678642560d2dcbe69
python3.12-debuginfo-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 3fe6ec8fc9e62ce70358e79202dc44ec7d8450cf4050f652a0f7131572d5487d
python3.12-debugsource-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 7144556a21f436719ee4d2cacf1f1473d435ee450fc9eba73f7be55c63e16865
python3.12-devel-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: b633b86c7a1aa21e56c508b28c8085101c7bf015029039ff2819e545d622b489
python3.12-libs-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 523523f288c771ccc894d324ed34c4c35d545cae7e95628d5b0d0cfeb0d64231
python3.12-tkinter-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: fd981a71dd3781aabf13ba8f6c014c30ac50ac6d6c7aaba88972c3e6e5bb2dbc

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
x86_64
python3.12-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 91984c97df26ea2031881de4d61b6460d66bc3049c3d004652e5d743f99851b9
python3.12-debuginfo-3.12.1-4.el9_4.10.i686.rpm SHA-256: 8d7d34a42f53c0297bb5b1b3f59e6b7c3baeb45877b4950fcf678c5a6abf006e
python3.12-debuginfo-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: c1b88a6334a1af71b4973c050bb5854262865239a62717ab8015237bf92de2b4
python3.12-debugsource-3.12.1-4.el9_4.10.i686.rpm SHA-256: 0ef9aa6aef6dcbdb354d763fd37ce1488dbc747d3a7f86323903d99913c12a93
python3.12-debugsource-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 34a2f9d5c19c7b926b65d4fc06b2a92c6c89b78f0df994721594b5ca0c09d3e9
python3.12-devel-3.12.1-4.el9_4.10.i686.rpm SHA-256: 666e5fa4de4b545cb59e1b0b68dd2099ebe30cff6b90ffd8615b0f76a537999b
python3.12-devel-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: e9094c9d15b2ddec0a66fe266383c299830d380d33161d3c1bd0d567868934bd
python3.12-libs-3.12.1-4.el9_4.10.i686.rpm SHA-256: 9d2ffcbfa0d48c2322edc14fc5a006a785f62abfd5b20f6bc75e1b31c6293fa6
python3.12-libs-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 9dceb92955c027ed9e13583ac2db7483b4421bb77120206e04ccd9d3508d7020
python3.12-tkinter-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 94798118446759cdba877efb0b966071b03d6e7c0938987f71fe52a48d12d0b3

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4

SRPM
x86_64
python3.12-3.12.1-4.el9_4.10.i686.rpm SHA-256: 141b4fbb978a59018a93c57963e71742733b093662ae8f3f7b20123e20f8174a
python3.12-debug-3.12.1-4.el9_4.10.i686.rpm SHA-256: 530fc6a33e5414195d780d4c147a7e0236a370e0a2e85c7b93f10a12e5bc8c1f
python3.12-debug-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: c6a15b3f278e036efe71eaef2423dc759bba5c91bb66a1b1402810f1c0a78bb4
python3.12-debuginfo-3.12.1-4.el9_4.10.i686.rpm SHA-256: 8d7d34a42f53c0297bb5b1b3f59e6b7c3baeb45877b4950fcf678c5a6abf006e
python3.12-debuginfo-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: c1b88a6334a1af71b4973c050bb5854262865239a62717ab8015237bf92de2b4
python3.12-debugsource-3.12.1-4.el9_4.10.i686.rpm SHA-256: 0ef9aa6aef6dcbdb354d763fd37ce1488dbc747d3a7f86323903d99913c12a93
python3.12-debugsource-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 34a2f9d5c19c7b926b65d4fc06b2a92c6c89b78f0df994721594b5ca0c09d3e9
python3.12-idle-3.12.1-4.el9_4.10.i686.rpm SHA-256: 68459894c4472bb15094e96456ec64a31b80b771b4ccad1a9c46c70e08af4e83
python3.12-idle-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: eedc2fed99118a84f1d31d0e569ce1e65b6cbc6c9aa9e7c7b1c705026e52e937
python3.12-test-3.12.1-4.el9_4.10.i686.rpm SHA-256: 424c4aafade30a38ed025f75d85facbe38526afbc7b387651cf45656ffe60491
python3.12-test-3.12.1-4.el9_4.10.x86_64.rpm SHA-256: 879723a7ee79b01e892c81a00ed9d11183967cd6e080be735db35ec8a2cf7503
python3.12-tkinter-3.12.1-4.el9_4.10.i686.rpm SHA-256: 53e009f61ffee3baea823fc81b74edee420c8988cc1b6246ee429c5f627c1094

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4

SRPM
ppc64le
python3.12-debug-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 70822adf2924f59df3522496a524585dccadbc1752d18da9c22c8ee24826cbe8
python3.12-debuginfo-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 3fe6ec8fc9e62ce70358e79202dc44ec7d8450cf4050f652a0f7131572d5487d
python3.12-debugsource-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 7144556a21f436719ee4d2cacf1f1473d435ee450fc9eba73f7be55c63e16865
python3.12-idle-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 1208052adf4709c17a9d19a18d904e3c9f07e0b18bbe3ca017a4d8eb21ba9f49
python3.12-test-3.12.1-4.el9_4.10.ppc64le.rpm SHA-256: 33c1db4ef691a5ab5b870b99e2422d64f59f0379f5de22b6e028480f3dd9fb87

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4

SRPM
s390x
python3.12-debug-3.12.1-4.el9_4.10.s390x.rpm SHA-256: cc831a3c906b532cb2f73d840693c2b4917a5ed28cc2176f185ba25c6afc5e63
python3.12-debuginfo-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 91ab33c11353112c803f9766818d4c93f244264c06a96da6a0085e9d039ae7ef
python3.12-debugsource-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 8c650b93a87eb6b85a9b9205ba954493827c5aafaa6c30e17244a14e05edee0a
python3.12-idle-3.12.1-4.el9_4.10.s390x.rpm SHA-256: c41da7209ae431c5059c27ea2fef540c03c2f5644d88e7a6aa35b3f7a3b74bb3
python3.12-test-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 10f95b5d7887730a741a5aa8127bf2638dda726ceb6a32eb39b6c8c6adb926c2

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4

SRPM
aarch64
python3.12-debug-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: cee77eb5ceed7e2049931007abc6ab42bc37e53e3ba6f1743675bb28f15a3e7f
python3.12-debuginfo-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 08e42952e8812801cf32017995c5a06039e9769ed7fd26cace9aeac64999fd0a
python3.12-debugsource-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: def39b797e8da2d8881383ed72ed25e37593982e0bb60cde8917f7bc8d2fd85e
python3.12-idle-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 0f39342bf41f67f52111187e7768606f8b2163da4359e0f8b1e22c5faacbeef1
python3.12-test-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: ffbc436e45ed8c51c51a20452d9095796ce906215980d5d38cc91c30a0287859

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
aarch64
python3.12-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 504eec39601b716b2b45bc9a2d070159bce9ef00cf06b9e85eeb87707aa15cd0
python3.12-debuginfo-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 08e42952e8812801cf32017995c5a06039e9769ed7fd26cace9aeac64999fd0a
python3.12-debugsource-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: def39b797e8da2d8881383ed72ed25e37593982e0bb60cde8917f7bc8d2fd85e
python3.12-devel-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 26c8990c38306cb481e2315b972d5a4b01255027b45e3fff4d0c41ae5ff80fef
python3.12-libs-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 346b20fabb5a7e1b739b493ac422138961fa60eb407038c4593b645f28d3f39b
python3.12-tkinter-3.12.1-4.el9_4.10.aarch64.rpm SHA-256: 8033ca489a03901acc781ccd695f48e77f9e385ac0923abf62a7250930532ed4

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
python3.12-3.12.1-4.el9_4.10.src.rpm SHA-256: 815aa026b4cf3838cbfedf9c76f8f46067dfe3599ef3fdc90ac966da99b990d4
s390x
python3.12-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 3640612d1ebd595eba474e569136a689ab20a931bd00f8176646315992179bf0
python3.12-debuginfo-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 91ab33c11353112c803f9766818d4c93f244264c06a96da6a0085e9d039ae7ef
python3.12-debugsource-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 8c650b93a87eb6b85a9b9205ba954493827c5aafaa6c30e17244a14e05edee0a
python3.12-devel-3.12.1-4.el9_4.10.s390x.rpm SHA-256: af98942c5cd854b361b84e10c03cf8d8180675bc0c133c0b20414cf1104bb6ba
python3.12-libs-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 76eeb83694cb11ef0fa52b552019815310eea25809a9137a3db2c51b0cba2ffa
python3.12-tkinter-3.12.1-4.el9_4.10.s390x.rpm SHA-256: 23721ea21c6bc5c6f413bc6ee366cb9ab68f226e615d1b60fb1201d3925a5f5e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.