Red Hat Product Errata RHSA-2026:6281 - Security Advisory
Issued:
2026-03-31
Updated:
2026-03-31

RHSA-2026:6281 - Security Advisory

Synopsis

Important: python3.11 security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • BZ - 2449649 - CVE-2026-4519 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

Red Hat Enterprise Linux for x86_64 8

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
x86_64
python3.11-3.11.13-6.el8_10.x86_64.rpm SHA-256: b292bbf8a2b0b0991c3c7402c61b87145753b083d45131b1ce19c830a8def8c4
python3.11-debuginfo-3.11.13-6.el8_10.i686.rpm SHA-256: 10bd85fb42161df7064bd659bade0f6f5f1a64d4b062629ef34298cc2aab71c2
python3.11-debuginfo-3.11.13-6.el8_10.x86_64.rpm SHA-256: d185c27ab939cc0b919feb7bd1a45b641766c14d8e88fbb0f6ea01ded89344ee
python3.11-debugsource-3.11.13-6.el8_10.i686.rpm SHA-256: be5084f952c669ee899f54e5a560feaa5b34c2b1d53ffac8ca2e51fe489a388c
python3.11-debugsource-3.11.13-6.el8_10.x86_64.rpm SHA-256: 9d1909db8e9f5ff79d1815900efcf3ddf869b786ecc80e52bd8d6ddfd8631eff
python3.11-devel-3.11.13-6.el8_10.i686.rpm SHA-256: e856ba7466b932c3e09434ccca65c25be6d9251a64ee29752b8b29d21632b1ea
python3.11-devel-3.11.13-6.el8_10.x86_64.rpm SHA-256: 978df40fb6ddc795c9550b43dc5803147a241c87515e9fda5348159f8af5c108
python3.11-libs-3.11.13-6.el8_10.i686.rpm SHA-256: 9cf4c0c17537ea9a617a73a4f863e0544e9814f0c975568d54089c5ffc1cdc0b
python3.11-libs-3.11.13-6.el8_10.x86_64.rpm SHA-256: b0c1687f73a38f1a45a5f7ac1b1c92605cd31a571688fb487beb3395cb4436ff
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.x86_64.rpm SHA-256: 0a6b370b97089a0f29a299dcf554d3775e97c2f55e07e21cc1eaefedd79382d1

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
s390x
python3.11-3.11.13-6.el8_10.s390x.rpm SHA-256: 90c0ab6a769d7f3f704b7f12754ac16ed4809dcb05d96f889ed0e9af5508eb18
python3.11-debuginfo-3.11.13-6.el8_10.s390x.rpm SHA-256: 1c582feb63e207b6d5703508f00262f3f003426b273a80227b4b62ddd146b02d
python3.11-debugsource-3.11.13-6.el8_10.s390x.rpm SHA-256: 005c704eb35e6843572bb399dfe5cde7ad09878d291c54eb9f643c959385a797
python3.11-devel-3.11.13-6.el8_10.s390x.rpm SHA-256: e8f2c88281b2aa0573f391bb74e32398d7021364fe302622efc3f24f57c56714
python3.11-libs-3.11.13-6.el8_10.s390x.rpm SHA-256: 2300f2b315c90ac9016a3221a0dd14bdff1ac25a5689d6a1f4ac15ec406f3f24
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.s390x.rpm SHA-256: 5fa6770a5db756199f2dec527193777602f8b87479fe8307955bba7c2586413d

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
ppc64le
python3.11-3.11.13-6.el8_10.ppc64le.rpm SHA-256: c9d03a523dead5b3f1687727dffbf40b1614d205498deb6b299d57a86b37a1cf
python3.11-debuginfo-3.11.13-6.el8_10.ppc64le.rpm SHA-256: b0f1430f6d3dbcac68889561dcc6b25cf7311538a823ff4be5e7aea34cdb697d
python3.11-debugsource-3.11.13-6.el8_10.ppc64le.rpm SHA-256: 3464a0b801aaa14e52ed05fd5dcd86154db3719cc4edc4d7bc60130b7ff6ab53
python3.11-devel-3.11.13-6.el8_10.ppc64le.rpm SHA-256: d3e873c2abb98359c606e2a915fe7c62df9ad0382a6538b83bbd528030b01bd5
python3.11-libs-3.11.13-6.el8_10.ppc64le.rpm SHA-256: e75d42a7d94477ffa513ad863b45eaa517f8643ffe355ec9bf97a4f616ee46ba
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.ppc64le.rpm SHA-256: e76fcc2e55b97092b2c7291653eecf54baed27f986c47a280f2f818f422ac835

Red Hat Enterprise Linux for ARM 64 8

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
aarch64
python3.11-3.11.13-6.el8_10.aarch64.rpm SHA-256: d730f6178bb44982211dc16b90bcd31bce3886cfcb54a1a8936abbbee4453e88
python3.11-debuginfo-3.11.13-6.el8_10.aarch64.rpm SHA-256: 4ef5fa65a6ae5e42c29fdc7aee3d5b7a9717a30e4af500d3581735144577a81c
python3.11-debugsource-3.11.13-6.el8_10.aarch64.rpm SHA-256: 8ab5f08e9c83fb8b4cfff8826f57eda3b51dcf63f3d3aa3b551d0520eac9b8b7
python3.11-devel-3.11.13-6.el8_10.aarch64.rpm SHA-256: 692c0b5de9b32c07b6d567f6bd6534b46c6c8a7df8d0b824d3f7d8f86982938b
python3.11-libs-3.11.13-6.el8_10.aarch64.rpm SHA-256: d1c53393730e5e030a4f6b840b4ccb66f3b80d56e12706c60401acad225a44d6
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.aarch64.rpm SHA-256: 7befcf500fed8586b5737624aebd371bdd803c6ac866f067eb84482e8191cf58

Red Hat CodeReady Linux Builder for x86_64 8

SRPM
x86_64
python3.11-3.11.13-6.el8_10.i686.rpm SHA-256: 735a16f7d5325e6308f4abbf8af8f71c9cc38e1e1c7d3c0b433c2849d7d9286c
python3.11-debug-3.11.13-6.el8_10.i686.rpm SHA-256: c739f28ced0f632f3fbf595fd5239cfffb2be8e543caf0077cc3dfc483e5ef34
python3.11-debug-3.11.13-6.el8_10.x86_64.rpm SHA-256: fd08d933b494681d2ec21dd139507997776c633048dcbb2cea622ac827383c7d
python3.11-debuginfo-3.11.13-6.el8_10.i686.rpm SHA-256: 10bd85fb42161df7064bd659bade0f6f5f1a64d4b062629ef34298cc2aab71c2
python3.11-debuginfo-3.11.13-6.el8_10.x86_64.rpm SHA-256: d185c27ab939cc0b919feb7bd1a45b641766c14d8e88fbb0f6ea01ded89344ee
python3.11-debugsource-3.11.13-6.el8_10.i686.rpm SHA-256: be5084f952c669ee899f54e5a560feaa5b34c2b1d53ffac8ca2e51fe489a388c
python3.11-debugsource-3.11.13-6.el8_10.x86_64.rpm SHA-256: 9d1909db8e9f5ff79d1815900efcf3ddf869b786ecc80e52bd8d6ddfd8631eff
python3.11-idle-3.11.13-6.el8_10.i686.rpm SHA-256: bc1a428bbf55d0501607b10b07664c522e9c9eb74aaa08c5d600395b0bf1fdd2
python3.11-idle-3.11.13-6.el8_10.x86_64.rpm SHA-256: e076355baaf081ce3cee55756e123dd825c2faacac535fa77518f753a45e8537
python3.11-test-3.11.13-6.el8_10.i686.rpm SHA-256: b7c3d7a2eeb59e71b48a4fc5c9b4deadafd47832018b0631f8808a7ba6369894
python3.11-test-3.11.13-6.el8_10.x86_64.rpm SHA-256: 77c8b25b90663aaa7301ac7a59d165351d6c5a42193afca101a427828d9d7800
python3.11-tkinter-3.11.13-6.el8_10.i686.rpm SHA-256: 21acf5143fabc96ee6081d32e45ffbcc7df6c8dde3339c3fca5a00c3282dafd9

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM
ppc64le
python3.11-debug-3.11.13-6.el8_10.ppc64le.rpm SHA-256: 21e75dec534b965c2d6432329c7263a63af4c8308642fde0d0a349fd1ab255b0
python3.11-debuginfo-3.11.13-6.el8_10.ppc64le.rpm SHA-256: b0f1430f6d3dbcac68889561dcc6b25cf7311538a823ff4be5e7aea34cdb697d
python3.11-debugsource-3.11.13-6.el8_10.ppc64le.rpm SHA-256: 3464a0b801aaa14e52ed05fd5dcd86154db3719cc4edc4d7bc60130b7ff6ab53
python3.11-idle-3.11.13-6.el8_10.ppc64le.rpm SHA-256: 3d33c34e529aa059f502fd1f867fd449b96f95facab5555cc071d0954541ae6c
python3.11-test-3.11.13-6.el8_10.ppc64le.rpm SHA-256: ed0d874fcf396ab8cffda4fd99fb47839e8c9655a2d6b62200fed8382beccf97

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM
aarch64
python3.11-debug-3.11.13-6.el8_10.aarch64.rpm SHA-256: f917eb987c1bceae62caf8daac575692a538dd9685dae0bbe37b39469798a09f
python3.11-debuginfo-3.11.13-6.el8_10.aarch64.rpm SHA-256: 4ef5fa65a6ae5e42c29fdc7aee3d5b7a9717a30e4af500d3581735144577a81c
python3.11-debugsource-3.11.13-6.el8_10.aarch64.rpm SHA-256: 8ab5f08e9c83fb8b4cfff8826f57eda3b51dcf63f3d3aa3b551d0520eac9b8b7
python3.11-idle-3.11.13-6.el8_10.aarch64.rpm SHA-256: 49056fbe2545399999bc8bb9aa837f37786227807d0f095026b9e14ea9981292
python3.11-test-3.11.13-6.el8_10.aarch64.rpm SHA-256: 5f2963464b2333e1d94d6042e2dacfcb40433fa6abea438464f9d5c3724c6758

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM
s390x
python3.11-debug-3.11.13-6.el8_10.s390x.rpm SHA-256: 8c8757898022174ab33a31f0c02e0f353d94467670c565aa1e78b1e280974e99
python3.11-debuginfo-3.11.13-6.el8_10.s390x.rpm SHA-256: 1c582feb63e207b6d5703508f00262f3f003426b273a80227b4b62ddd146b02d
python3.11-debugsource-3.11.13-6.el8_10.s390x.rpm SHA-256: 005c704eb35e6843572bb399dfe5cde7ad09878d291c54eb9f643c959385a797
python3.11-idle-3.11.13-6.el8_10.s390x.rpm SHA-256: b108f751fe5b6f468ecd367f4bebbb2cca77ccf4e02912849875b5d8553c9370
python3.11-test-3.11.13-6.el8_10.s390x.rpm SHA-256: 04c1b633dc12a62a56dd186d922bb1bddb4c1f3e8e309677b74f31cfc956f529

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
x86_64
python3.11-3.11.13-6.el8_10.x86_64.rpm SHA-256: b292bbf8a2b0b0991c3c7402c61b87145753b083d45131b1ce19c830a8def8c4
python3.11-debuginfo-3.11.13-6.el8_10.i686.rpm SHA-256: 10bd85fb42161df7064bd659bade0f6f5f1a64d4b062629ef34298cc2aab71c2
python3.11-debuginfo-3.11.13-6.el8_10.x86_64.rpm SHA-256: d185c27ab939cc0b919feb7bd1a45b641766c14d8e88fbb0f6ea01ded89344ee
python3.11-debugsource-3.11.13-6.el8_10.i686.rpm SHA-256: be5084f952c669ee899f54e5a560feaa5b34c2b1d53ffac8ca2e51fe489a388c
python3.11-debugsource-3.11.13-6.el8_10.x86_64.rpm SHA-256: 9d1909db8e9f5ff79d1815900efcf3ddf869b786ecc80e52bd8d6ddfd8631eff
python3.11-devel-3.11.13-6.el8_10.i686.rpm SHA-256: e856ba7466b932c3e09434ccca65c25be6d9251a64ee29752b8b29d21632b1ea
python3.11-devel-3.11.13-6.el8_10.x86_64.rpm SHA-256: 978df40fb6ddc795c9550b43dc5803147a241c87515e9fda5348159f8af5c108
python3.11-libs-3.11.13-6.el8_10.i686.rpm SHA-256: 9cf4c0c17537ea9a617a73a4f863e0544e9814f0c975568d54089c5ffc1cdc0b
python3.11-libs-3.11.13-6.el8_10.x86_64.rpm SHA-256: b0c1687f73a38f1a45a5f7ac1b1c92605cd31a571688fb487beb3395cb4436ff
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.x86_64.rpm SHA-256: 0a6b370b97089a0f29a299dcf554d3775e97c2f55e07e21cc1eaefedd79382d1

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
aarch64
python3.11-3.11.13-6.el8_10.aarch64.rpm SHA-256: d730f6178bb44982211dc16b90bcd31bce3886cfcb54a1a8936abbbee4453e88
python3.11-debuginfo-3.11.13-6.el8_10.aarch64.rpm SHA-256: 4ef5fa65a6ae5e42c29fdc7aee3d5b7a9717a30e4af500d3581735144577a81c
python3.11-debugsource-3.11.13-6.el8_10.aarch64.rpm SHA-256: 8ab5f08e9c83fb8b4cfff8826f57eda3b51dcf63f3d3aa3b551d0520eac9b8b7
python3.11-devel-3.11.13-6.el8_10.aarch64.rpm SHA-256: 692c0b5de9b32c07b6d567f6bd6534b46c6c8a7df8d0b824d3f7d8f86982938b
python3.11-libs-3.11.13-6.el8_10.aarch64.rpm SHA-256: d1c53393730e5e030a4f6b840b4ccb66f3b80d56e12706c60401acad225a44d6
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.aarch64.rpm SHA-256: 7befcf500fed8586b5737624aebd371bdd803c6ac866f067eb84482e8191cf58

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
ppc64le
python3.11-3.11.13-6.el8_10.ppc64le.rpm SHA-256: c9d03a523dead5b3f1687727dffbf40b1614d205498deb6b299d57a86b37a1cf
python3.11-debuginfo-3.11.13-6.el8_10.ppc64le.rpm SHA-256: b0f1430f6d3dbcac68889561dcc6b25cf7311538a823ff4be5e7aea34cdb697d
python3.11-debugsource-3.11.13-6.el8_10.ppc64le.rpm SHA-256: 3464a0b801aaa14e52ed05fd5dcd86154db3719cc4edc4d7bc60130b7ff6ab53
python3.11-devel-3.11.13-6.el8_10.ppc64le.rpm SHA-256: d3e873c2abb98359c606e2a915fe7c62df9ad0382a6538b83bbd528030b01bd5
python3.11-libs-3.11.13-6.el8_10.ppc64le.rpm SHA-256: e75d42a7d94477ffa513ad863b45eaa517f8643ffe355ec9bf97a4f616ee46ba
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.ppc64le.rpm SHA-256: e76fcc2e55b97092b2c7291653eecf54baed27f986c47a280f2f818f422ac835

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
python3.11-3.11.13-6.el8_10.src.rpm SHA-256: 77c501e43d1c1aff8b0ba5d3bc5b30b2d41c93af79ca822b961b241f1d227382
s390x
python3.11-3.11.13-6.el8_10.s390x.rpm SHA-256: 90c0ab6a769d7f3f704b7f12754ac16ed4809dcb05d96f889ed0e9af5508eb18
python3.11-debuginfo-3.11.13-6.el8_10.s390x.rpm SHA-256: 1c582feb63e207b6d5703508f00262f3f003426b273a80227b4b62ddd146b02d
python3.11-debugsource-3.11.13-6.el8_10.s390x.rpm SHA-256: 005c704eb35e6843572bb399dfe5cde7ad09878d291c54eb9f643c959385a797
python3.11-devel-3.11.13-6.el8_10.s390x.rpm SHA-256: e8f2c88281b2aa0573f391bb74e32398d7021364fe302622efc3f24f57c56714
python3.11-libs-3.11.13-6.el8_10.s390x.rpm SHA-256: 2300f2b315c90ac9016a3221a0dd14bdff1ac25a5689d6a1f4ac15ec406f3f24
python3.11-rpm-macros-3.11.13-6.el8_10.noarch.rpm SHA-256: b268341791d363e312e7261ecbe6994d572c7f2f900fec83bfb480f325fae448
python3.11-tkinter-3.11.13-6.el8_10.s390x.rpm SHA-256: 5fa6770a5db756199f2dec527193777602f8b87479fe8307955bba7c2586413d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.