Red Hat Product Errata RHSA-2026:4473 - Security Advisory
Issued:
2026-03-12
Updated:
2026-03-12

RHSA-2026:4473 - Security Advisory

Synopsis

Moderate: python3.11 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  • cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  • cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  • cpython: email header injection due to unquoted newlines (CVE-2026-1299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2431367 - CVE-2026-0865 cpython: wsgiref.headers.Headers allows header newline injection in Python
  • BZ - 2431368 - CVE-2025-15366 cpython: IMAP command injection in user-controlled commands
  • BZ - 2431373 - CVE-2025-15367 cpython: POP3 command injection in user-controlled commands
  • BZ - 2432437 - CVE-2026-1299 cpython: email header injection due to unquoted newlines

Red Hat Enterprise Linux for x86_64 8

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
x86_64
python3.11-3.11.13-5.el8_10.x86_64.rpm SHA-256: 62d65349cd90b192a32ac03692847be522aa691e67bc189d61d3be5c10cc6b82
python3.11-debuginfo-3.11.13-5.el8_10.i686.rpm SHA-256: 41d4de3c1018dac97cc8ece4af659b0df4bb326d488e808a3f0f53cb72dc2f3d
python3.11-debuginfo-3.11.13-5.el8_10.x86_64.rpm SHA-256: 816dda66c236ad464723dccbb95689232e554dca2a8d945050783191f22da685
python3.11-debugsource-3.11.13-5.el8_10.i686.rpm SHA-256: cbae4b797b5c16c05558eb5f8759de572fc2dc795749a2e42dfb1b5b7cf9929b
python3.11-debugsource-3.11.13-5.el8_10.x86_64.rpm SHA-256: 77aaa079c415cd1cd47b1bcd3d3a25949d060471e6d0a7f2a28ae5bce50a52ac
python3.11-devel-3.11.13-5.el8_10.i686.rpm SHA-256: f4e4571cd14614dce20a289ff4d6a5abe31e0404c44196b74986102a50ae07a8
python3.11-devel-3.11.13-5.el8_10.x86_64.rpm SHA-256: a6806bee13d6b1f5921a44f7b27d71f07a97f79a4f76b4dfd9f08d49d69850a3
python3.11-libs-3.11.13-5.el8_10.i686.rpm SHA-256: cb28ba290606cae2488038964e3e4c589514ac236717945ae741af0094a220e4
python3.11-libs-3.11.13-5.el8_10.x86_64.rpm SHA-256: 49340d9c265bdc694fcf64e25b2c7eed46b9f33156372448e829c39e447b15f1
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.x86_64.rpm SHA-256: 8c9b8211479b67f0db079290674b249b2dc57a86bbc430b7ffcb9f36e18a1c1e

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
s390x
python3.11-3.11.13-5.el8_10.s390x.rpm SHA-256: edcd59a8c0101a27bf5965b47939b753b1ca987cce982b61c23f2b8dd076802f
python3.11-debuginfo-3.11.13-5.el8_10.s390x.rpm SHA-256: 4d409577e63d82ec8151612f229a4e885886ae2b016c029f2b17ccd40ae4ac1d
python3.11-debugsource-3.11.13-5.el8_10.s390x.rpm SHA-256: a1334c00f0c7f06dc067852b3b26ac59c3f57c82b46dea4015e4c16b1e7ba39d
python3.11-devel-3.11.13-5.el8_10.s390x.rpm SHA-256: 19d81e8f691c266889b1b230b4423aa788c3f2da723b5befa7c5c0cfa11c5537
python3.11-libs-3.11.13-5.el8_10.s390x.rpm SHA-256: 2a4da8f4092ad26e42d168f8cf02478596f026c798f652ca2ff1a4478107e694
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.s390x.rpm SHA-256: d64fcb80e8bd578ddcef6db57e636f31e8c3ed499a2676a421d1930737e44aeb

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
ppc64le
python3.11-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 0838ba4840f5cdc82e70847273eecd297769f3c447c813f3c220159bb5de4556
python3.11-debuginfo-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 65ec14f8b9b140e51a8c4f01b918a71e95489f5be26ffd3117f55aa775a2f41c
python3.11-debugsource-3.11.13-5.el8_10.ppc64le.rpm SHA-256: a504c46319ed168990bd70beea90594275e520835b0217ffc2fd20aff5c0dfa5
python3.11-devel-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 19931c105875ef2564a2f4856ce27c6488f7fa4971225fc83b67f4a770a82d37
python3.11-libs-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 3cca67a9ed6703c358d15bf5896b56e1d62f98707f305587fdf8216ebf57de5f
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 47eceaa50e02ff1ce5e4c46deb7d2b4a36df7f51f4db8f5c36226bacdcb4ef42

Red Hat Enterprise Linux for ARM 64 8

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
aarch64
python3.11-3.11.13-5.el8_10.aarch64.rpm SHA-256: 05fc6e9089700f34fc2ed656ec06405f5ce5de1df2ccafd7db84200f688b8a0e
python3.11-debuginfo-3.11.13-5.el8_10.aarch64.rpm SHA-256: e718c40f622cf4f74a3b7d7d4f41cf656311c2d961a01987d31427792ca48569
python3.11-debugsource-3.11.13-5.el8_10.aarch64.rpm SHA-256: 7b50951cf4d746fd272edbf567ff568900ef7e225d710a39e0772b9e02e1640b
python3.11-devel-3.11.13-5.el8_10.aarch64.rpm SHA-256: d30dda572a7aab5eb7e2ec224533bfc53716f5da0e0dbfcee4e5904be5587007
python3.11-libs-3.11.13-5.el8_10.aarch64.rpm SHA-256: 4434dd563e64519e8374f71faaa10551b9e34b1c8039a660a37082fbdcc506b5
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.aarch64.rpm SHA-256: 4196d1fc4ec77ba521e5ba536c89bc05047018dde79db48fdf9f4dbcb27d1762

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
python3.11-3.11.13-5.el8_10.i686.rpm SHA-256: d562cf99a03976c51cb8595c2eae6143621474fc1bd0a9d475ff51ffa6e7526a
python3.11-debug-3.11.13-5.el8_10.i686.rpm SHA-256: 635f346b747513d5899d31e13eb30e739b5f3b2282adc13094341c5c0b5210ad
python3.11-debug-3.11.13-5.el8_10.x86_64.rpm SHA-256: a7bec422d41a2c248728a8d62fa40dca95ab3f0cb384629acfec6c2ec129a579
python3.11-debuginfo-3.11.13-5.el8_10.i686.rpm SHA-256: 41d4de3c1018dac97cc8ece4af659b0df4bb326d488e808a3f0f53cb72dc2f3d
python3.11-debuginfo-3.11.13-5.el8_10.x86_64.rpm SHA-256: 816dda66c236ad464723dccbb95689232e554dca2a8d945050783191f22da685
python3.11-debugsource-3.11.13-5.el8_10.i686.rpm SHA-256: cbae4b797b5c16c05558eb5f8759de572fc2dc795749a2e42dfb1b5b7cf9929b
python3.11-debugsource-3.11.13-5.el8_10.x86_64.rpm SHA-256: 77aaa079c415cd1cd47b1bcd3d3a25949d060471e6d0a7f2a28ae5bce50a52ac
python3.11-idle-3.11.13-5.el8_10.i686.rpm SHA-256: f0066688156a6b04b750536eff58eeef2e028e5c45a6f0e563bd586cb32d50e5
python3.11-idle-3.11.13-5.el8_10.x86_64.rpm SHA-256: a3a37b2539337d8b0ed59ad932ebb92a09aa23f5e12ede3d08966d589d38fa34
python3.11-test-3.11.13-5.el8_10.i686.rpm SHA-256: b2a3584d92e1ae58e8e6e374fdb9b59bcd24155d8b48bb74e68f2aac6317bae7
python3.11-test-3.11.13-5.el8_10.x86_64.rpm SHA-256: ff77ee8d720fd3541b198e8dcec176a13aa346eda686b21601da39ac21913d53
python3.11-tkinter-3.11.13-5.el8_10.i686.rpm SHA-256: c97897c3419549e6426302dd007001493d587495992c84d958128732c3b9cfdf

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
python3.11-debug-3.11.13-5.el8_10.ppc64le.rpm SHA-256: f3d3b83adf25b53c3b9c68817cdc337007dda2bf44ee4c2c02705c5f0ca3fa43
python3.11-debuginfo-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 65ec14f8b9b140e51a8c4f01b918a71e95489f5be26ffd3117f55aa775a2f41c
python3.11-debugsource-3.11.13-5.el8_10.ppc64le.rpm SHA-256: a504c46319ed168990bd70beea90594275e520835b0217ffc2fd20aff5c0dfa5
python3.11-idle-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 2e6d21af7a1bc895fba1ea85b97df48429bb5f472eceb377764ff37254da90b6
python3.11-test-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 65b3cb8511cbc29eb2d6ea5a8c2983070b44096744bf550a118606ced8be0686

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
python3.11-debug-3.11.13-5.el8_10.aarch64.rpm SHA-256: 2cdec81f0f3da28b814cc9153334746465953ae0f86efab558e4c4cbda8d629f
python3.11-debuginfo-3.11.13-5.el8_10.aarch64.rpm SHA-256: e718c40f622cf4f74a3b7d7d4f41cf656311c2d961a01987d31427792ca48569
python3.11-debugsource-3.11.13-5.el8_10.aarch64.rpm SHA-256: 7b50951cf4d746fd272edbf567ff568900ef7e225d710a39e0772b9e02e1640b
python3.11-idle-3.11.13-5.el8_10.aarch64.rpm SHA-256: fb4e681a721d949c6e9d88e158ce508725c82473f10b4b08d369dfa42d3528c6
python3.11-test-3.11.13-5.el8_10.aarch64.rpm SHA-256: b2c43aa93edcdfa1f25220b588da2ff08e2beb2ee28222b53b094a7e586ef90e

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
python3.11-debug-3.11.13-5.el8_10.s390x.rpm SHA-256: db480e4f7b5bec23e358876f2e22e59a74d03c40c9a887c4f8c1df9fb109f16e
python3.11-debuginfo-3.11.13-5.el8_10.s390x.rpm SHA-256: 4d409577e63d82ec8151612f229a4e885886ae2b016c029f2b17ccd40ae4ac1d
python3.11-debugsource-3.11.13-5.el8_10.s390x.rpm SHA-256: a1334c00f0c7f06dc067852b3b26ac59c3f57c82b46dea4015e4c16b1e7ba39d
python3.11-idle-3.11.13-5.el8_10.s390x.rpm SHA-256: 39c02daef7a1eec814df65860891865c7d5acdbe0ad04e68d5b7a8a25b97430d
python3.11-test-3.11.13-5.el8_10.s390x.rpm SHA-256: bacb806f8f549c452b2b324938decf366fa97fc21bb85faf4fea97b6e6b7b28b

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
x86_64
python3.11-3.11.13-5.el8_10.x86_64.rpm SHA-256: 62d65349cd90b192a32ac03692847be522aa691e67bc189d61d3be5c10cc6b82
python3.11-debuginfo-3.11.13-5.el8_10.i686.rpm SHA-256: 41d4de3c1018dac97cc8ece4af659b0df4bb326d488e808a3f0f53cb72dc2f3d
python3.11-debuginfo-3.11.13-5.el8_10.x86_64.rpm SHA-256: 816dda66c236ad464723dccbb95689232e554dca2a8d945050783191f22da685
python3.11-debugsource-3.11.13-5.el8_10.i686.rpm SHA-256: cbae4b797b5c16c05558eb5f8759de572fc2dc795749a2e42dfb1b5b7cf9929b
python3.11-debugsource-3.11.13-5.el8_10.x86_64.rpm SHA-256: 77aaa079c415cd1cd47b1bcd3d3a25949d060471e6d0a7f2a28ae5bce50a52ac
python3.11-devel-3.11.13-5.el8_10.i686.rpm SHA-256: f4e4571cd14614dce20a289ff4d6a5abe31e0404c44196b74986102a50ae07a8
python3.11-devel-3.11.13-5.el8_10.x86_64.rpm SHA-256: a6806bee13d6b1f5921a44f7b27d71f07a97f79a4f76b4dfd9f08d49d69850a3
python3.11-libs-3.11.13-5.el8_10.i686.rpm SHA-256: cb28ba290606cae2488038964e3e4c589514ac236717945ae741af0094a220e4
python3.11-libs-3.11.13-5.el8_10.x86_64.rpm SHA-256: 49340d9c265bdc694fcf64e25b2c7eed46b9f33156372448e829c39e447b15f1
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.x86_64.rpm SHA-256: 8c9b8211479b67f0db079290674b249b2dc57a86bbc430b7ffcb9f36e18a1c1e

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
aarch64
python3.11-3.11.13-5.el8_10.aarch64.rpm SHA-256: 05fc6e9089700f34fc2ed656ec06405f5ce5de1df2ccafd7db84200f688b8a0e
python3.11-debuginfo-3.11.13-5.el8_10.aarch64.rpm SHA-256: e718c40f622cf4f74a3b7d7d4f41cf656311c2d961a01987d31427792ca48569
python3.11-debugsource-3.11.13-5.el8_10.aarch64.rpm SHA-256: 7b50951cf4d746fd272edbf567ff568900ef7e225d710a39e0772b9e02e1640b
python3.11-devel-3.11.13-5.el8_10.aarch64.rpm SHA-256: d30dda572a7aab5eb7e2ec224533bfc53716f5da0e0dbfcee4e5904be5587007
python3.11-libs-3.11.13-5.el8_10.aarch64.rpm SHA-256: 4434dd563e64519e8374f71faaa10551b9e34b1c8039a660a37082fbdcc506b5
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.aarch64.rpm SHA-256: 4196d1fc4ec77ba521e5ba536c89bc05047018dde79db48fdf9f4dbcb27d1762

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
ppc64le
python3.11-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 0838ba4840f5cdc82e70847273eecd297769f3c447c813f3c220159bb5de4556
python3.11-debuginfo-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 65ec14f8b9b140e51a8c4f01b918a71e95489f5be26ffd3117f55aa775a2f41c
python3.11-debugsource-3.11.13-5.el8_10.ppc64le.rpm SHA-256: a504c46319ed168990bd70beea90594275e520835b0217ffc2fd20aff5c0dfa5
python3.11-devel-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 19931c105875ef2564a2f4856ce27c6488f7fa4971225fc83b67f4a770a82d37
python3.11-libs-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 3cca67a9ed6703c358d15bf5896b56e1d62f98707f305587fdf8216ebf57de5f
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.ppc64le.rpm SHA-256: 47eceaa50e02ff1ce5e4c46deb7d2b4a36df7f51f4db8f5c36226bacdcb4ef42

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-5.el8_10.src.rpm SHA-256: 88238f896bf2461422935f91c65689ddc060fc309b64d0e62b14a00b27e8f0d7
s390x
python3.11-3.11.13-5.el8_10.s390x.rpm SHA-256: edcd59a8c0101a27bf5965b47939b753b1ca987cce982b61c23f2b8dd076802f
python3.11-debuginfo-3.11.13-5.el8_10.s390x.rpm SHA-256: 4d409577e63d82ec8151612f229a4e885886ae2b016c029f2b17ccd40ae4ac1d
python3.11-debugsource-3.11.13-5.el8_10.s390x.rpm SHA-256: a1334c00f0c7f06dc067852b3b26ac59c3f57c82b46dea4015e4c16b1e7ba39d
python3.11-devel-3.11.13-5.el8_10.s390x.rpm SHA-256: 19d81e8f691c266889b1b230b4423aa788c3f2da723b5befa7c5c0cfa11c5537
python3.11-libs-3.11.13-5.el8_10.s390x.rpm SHA-256: 2a4da8f4092ad26e42d168f8cf02478596f026c798f652ca2ff1a4478107e694
python3.11-rpm-macros-3.11.13-5.el8_10.noarch.rpm SHA-256: ca683c3f7b39effde4bd50270d015d686fe871bf3e7f72703ef6e953c2577339
python3.11-tkinter-3.11.13-5.el8_10.s390x.rpm SHA-256: d64fcb80e8bd578ddcef6db57e636f31e8c3ed499a2676a421d1930737e44aeb

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.