红帽产品勘误 RHSA-2026:5215 - Security Advisory
发布：
2026-03-23
已更新：
2026-03-23

RHSA-2026:5215 - Security Advisory

概述

Moderate: python3 security update

类型/严重性

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for python3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  • cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  • cpython: email header injection due to unquoted newlines (CVE-2026-1299)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

修复

  • BZ - 2431368 - CVE-2025-15366 cpython: IMAP command injection in user-controlled commands
  • BZ - 2431373 - CVE-2025-15367 cpython: POP3 command injection in user-controlled commands
  • BZ - 2432437 - CVE-2026-1299 cpython: email header injection due to unquoted newlines

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
python3-3.6.8-47.el8_6.11.src.rpm SHA-256: a889a38a0754e364d2ad619b10fab6a7a1a61f225ec1bbfecc1ce5942db1528a
x86_64
platform-python-3.6.8-47.el8_6.11.i686.rpm SHA-256: 5922ab7440306ed006a5158c3688497186ba02c83992a88057e917a849ddec5a
platform-python-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 45caaa4ae0f131f5278fe323db8813b41f490db0b256b79e021e418797f70e81
platform-python-debug-3.6.8-47.el8_6.11.i686.rpm SHA-256: 13685025f060ab1308508981dc31e9f47cd7e56d37011728c8e6713c5e23d9f2
platform-python-debug-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: dd38ccd9dfb547d46f44dc5e748e7de97c829e2ff1da44748dffbbb1d08b5e8c
platform-python-devel-3.6.8-47.el8_6.11.i686.rpm SHA-256: 0705d235b5e6e17b83645fe9c48d1180b93fdf85e7c5ef1f7c9be50bcf6202e6
platform-python-devel-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 193ba206c2526b3118d8f7efdfa5f68faef8b8c1a97cfcebe3763da97e202bd5
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-idle-3.6.8-47.el8_6.11.i686.rpm SHA-256: d6fee9f9096b33b5f91aecdd73e7e45d78ea41e31df081fc92754b05239da99a
python3-idle-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 1c492376d6f1b0a35f544330e1b8e354de3eb5f3c3a9a7e412562eaad5ce20ba
python3-libs-3.6.8-47.el8_6.11.i686.rpm SHA-256: 702a1fd89491f9d45b15d81e24cbaf984ef73a8378e9d6b43f24d78ef96a9933
python3-libs-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: d5e0e78731de9f0eba1a7e8946b0611abd95dc5beea2930dbb66c7a8a1bf74b7
python3-test-3.6.8-47.el8_6.11.i686.rpm SHA-256: 591fe7f3518e1bc468635e0dd822baa6b1bc4ddce4c8f7529d12b55207917983
python3-test-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: b96002257b7d5c81c238a51f535053407c36d46addc63549dec2d60f514372dc
python3-tkinter-3.6.8-47.el8_6.11.i686.rpm SHA-256: 38228ee6d02d19a1c8525638cd83f278bad11d9c6f74cddd1a91dab7196a3ae9
python3-tkinter-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 60f4e88b0f8ce9a698091020e219635b3c6807866c4cdd9fd4cc9ad2be056b20

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
python3-3.6.8-47.el8_6.11.src.rpm SHA-256: a889a38a0754e364d2ad619b10fab6a7a1a61f225ec1bbfecc1ce5942db1528a
x86_64
platform-python-3.6.8-47.el8_6.11.i686.rpm SHA-256: 5922ab7440306ed006a5158c3688497186ba02c83992a88057e917a849ddec5a
platform-python-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 45caaa4ae0f131f5278fe323db8813b41f490db0b256b79e021e418797f70e81
platform-python-debug-3.6.8-47.el8_6.11.i686.rpm SHA-256: 13685025f060ab1308508981dc31e9f47cd7e56d37011728c8e6713c5e23d9f2
platform-python-debug-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: dd38ccd9dfb547d46f44dc5e748e7de97c829e2ff1da44748dffbbb1d08b5e8c
platform-python-devel-3.6.8-47.el8_6.11.i686.rpm SHA-256: 0705d235b5e6e17b83645fe9c48d1180b93fdf85e7c5ef1f7c9be50bcf6202e6
platform-python-devel-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 193ba206c2526b3118d8f7efdfa5f68faef8b8c1a97cfcebe3763da97e202bd5
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-idle-3.6.8-47.el8_6.11.i686.rpm SHA-256: d6fee9f9096b33b5f91aecdd73e7e45d78ea41e31df081fc92754b05239da99a
python3-idle-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 1c492376d6f1b0a35f544330e1b8e354de3eb5f3c3a9a7e412562eaad5ce20ba
python3-libs-3.6.8-47.el8_6.11.i686.rpm SHA-256: 702a1fd89491f9d45b15d81e24cbaf984ef73a8378e9d6b43f24d78ef96a9933
python3-libs-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: d5e0e78731de9f0eba1a7e8946b0611abd95dc5beea2930dbb66c7a8a1bf74b7
python3-test-3.6.8-47.el8_6.11.i686.rpm SHA-256: 591fe7f3518e1bc468635e0dd822baa6b1bc4ddce4c8f7529d12b55207917983
python3-test-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: b96002257b7d5c81c238a51f535053407c36d46addc63549dec2d60f514372dc
python3-tkinter-3.6.8-47.el8_6.11.i686.rpm SHA-256: 38228ee6d02d19a1c8525638cd83f278bad11d9c6f74cddd1a91dab7196a3ae9
python3-tkinter-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 60f4e88b0f8ce9a698091020e219635b3c6807866c4cdd9fd4cc9ad2be056b20

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
python3-3.6.8-47.el8_6.11.src.rpm SHA-256: a889a38a0754e364d2ad619b10fab6a7a1a61f225ec1bbfecc1ce5942db1528a
x86_64
platform-python-3.6.8-47.el8_6.11.i686.rpm SHA-256: 5922ab7440306ed006a5158c3688497186ba02c83992a88057e917a849ddec5a
platform-python-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 45caaa4ae0f131f5278fe323db8813b41f490db0b256b79e021e418797f70e81
platform-python-debug-3.6.8-47.el8_6.11.i686.rpm SHA-256: 13685025f060ab1308508981dc31e9f47cd7e56d37011728c8e6713c5e23d9f2
platform-python-debug-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: dd38ccd9dfb547d46f44dc5e748e7de97c829e2ff1da44748dffbbb1d08b5e8c
platform-python-devel-3.6.8-47.el8_6.11.i686.rpm SHA-256: 0705d235b5e6e17b83645fe9c48d1180b93fdf85e7c5ef1f7c9be50bcf6202e6
platform-python-devel-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 193ba206c2526b3118d8f7efdfa5f68faef8b8c1a97cfcebe3763da97e202bd5
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-idle-3.6.8-47.el8_6.11.i686.rpm SHA-256: d6fee9f9096b33b5f91aecdd73e7e45d78ea41e31df081fc92754b05239da99a
python3-idle-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 1c492376d6f1b0a35f544330e1b8e354de3eb5f3c3a9a7e412562eaad5ce20ba
python3-libs-3.6.8-47.el8_6.11.i686.rpm SHA-256: 702a1fd89491f9d45b15d81e24cbaf984ef73a8378e9d6b43f24d78ef96a9933
python3-libs-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: d5e0e78731de9f0eba1a7e8946b0611abd95dc5beea2930dbb66c7a8a1bf74b7
python3-test-3.6.8-47.el8_6.11.i686.rpm SHA-256: 591fe7f3518e1bc468635e0dd822baa6b1bc4ddce4c8f7529d12b55207917983
python3-test-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: b96002257b7d5c81c238a51f535053407c36d46addc63549dec2d60f514372dc
python3-tkinter-3.6.8-47.el8_6.11.i686.rpm SHA-256: 38228ee6d02d19a1c8525638cd83f278bad11d9c6f74cddd1a91dab7196a3ae9
python3-tkinter-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 60f4e88b0f8ce9a698091020e219635b3c6807866c4cdd9fd4cc9ad2be056b20

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
python3-3.6.8-47.el8_6.11.src.rpm SHA-256: a889a38a0754e364d2ad619b10fab6a7a1a61f225ec1bbfecc1ce5942db1528a
ppc64le
platform-python-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 5669745613eb204a3e626c43ff462660342daca88c6a3f4439bac152a641efa8
platform-python-debug-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: edf5a3d1f1ce1eac1ae1b8bedf7b24a0f71d47e169f51647dc9c52785e3c054e
platform-python-devel-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 0f1b6a9db2cf83bc9c8192ca6ffa148a8f1ea40705161a68020b42c713beaf14
python3-debuginfo-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 504c26bb5cc7ecb8fe68b6fcd1caf6983e0274ad2de5fcff0bd9bc3aaff39d54
python3-debuginfo-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 504c26bb5cc7ecb8fe68b6fcd1caf6983e0274ad2de5fcff0bd9bc3aaff39d54
python3-debugsource-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 403a31593ea96db700b7de82ae4e5857ec4e00ba02834a0a4bc03ab90fb8f677
python3-debugsource-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 403a31593ea96db700b7de82ae4e5857ec4e00ba02834a0a4bc03ab90fb8f677
python3-idle-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 1f6ed64d80e140f366078f75a9f6a7e40c87033c7436752208afa58b706f2264
python3-libs-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: 7b5925439ee39d75acc627e3f9823ff8ebcb0955b9d9906b0915e26fdd447d1a
python3-test-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: c07705a436035778e2caa460dacc8b381df26282252cf1fbbad86a3e4c6f1b34
python3-tkinter-3.6.8-47.el8_6.11.ppc64le.rpm SHA-256: ae9afbde712f4f26e30527df6ddbc6d21b2c02a0a6d3bb7dde63f05eaa5ccd27

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
python3-3.6.8-47.el8_6.11.src.rpm SHA-256: a889a38a0754e364d2ad619b10fab6a7a1a61f225ec1bbfecc1ce5942db1528a
x86_64
platform-python-3.6.8-47.el8_6.11.i686.rpm SHA-256: 5922ab7440306ed006a5158c3688497186ba02c83992a88057e917a849ddec5a
platform-python-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 45caaa4ae0f131f5278fe323db8813b41f490db0b256b79e021e418797f70e81
platform-python-debug-3.6.8-47.el8_6.11.i686.rpm SHA-256: 13685025f060ab1308508981dc31e9f47cd7e56d37011728c8e6713c5e23d9f2
platform-python-debug-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: dd38ccd9dfb547d46f44dc5e748e7de97c829e2ff1da44748dffbbb1d08b5e8c
platform-python-devel-3.6.8-47.el8_6.11.i686.rpm SHA-256: 0705d235b5e6e17b83645fe9c48d1180b93fdf85e7c5ef1f7c9be50bcf6202e6
platform-python-devel-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 193ba206c2526b3118d8f7efdfa5f68faef8b8c1a97cfcebe3763da97e202bd5
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.i686.rpm SHA-256: a155ba75ec220ba6b88f9eb47d6e59105247cce797db83ead873ccbac6fc018c
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debuginfo-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8012f46fac510007ef54bbc243dd85aadc98812a0d3fe29055bf76ac3605e2c9
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.i686.rpm SHA-256: 8338602cab6bbcd910b8ddee8048b4764212c28fd2b171864e47ac0de24091bc
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-debugsource-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 8642dae5d6f094b1bad14add12673697e842d344c45b6f433461b54ed6fff41a
python3-idle-3.6.8-47.el8_6.11.i686.rpm SHA-256: d6fee9f9096b33b5f91aecdd73e7e45d78ea41e31df081fc92754b05239da99a
python3-idle-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 1c492376d6f1b0a35f544330e1b8e354de3eb5f3c3a9a7e412562eaad5ce20ba
python3-libs-3.6.8-47.el8_6.11.i686.rpm SHA-256: 702a1fd89491f9d45b15d81e24cbaf984ef73a8378e9d6b43f24d78ef96a9933
python3-libs-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: d5e0e78731de9f0eba1a7e8946b0611abd95dc5beea2930dbb66c7a8a1bf74b7
python3-test-3.6.8-47.el8_6.11.i686.rpm SHA-256: 591fe7f3518e1bc468635e0dd822baa6b1bc4ddce4c8f7529d12b55207917983
python3-test-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: b96002257b7d5c81c238a51f535053407c36d46addc63549dec2d60f514372dc
python3-tkinter-3.6.8-47.el8_6.11.i686.rpm SHA-256: 38228ee6d02d19a1c8525638cd83f278bad11d9c6f74cddd1a91dab7196a3ae9
python3-tkinter-3.6.8-47.el8_6.11.x86_64.rpm SHA-256: 60f4e88b0f8ce9a698091020e219635b3c6807866c4cdd9fd4cc9ad2be056b20

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。