{"id":"RHSA-2026:0354","summary":"Red Hat Security Advisory: python3.12 security update","modified":"2026-03-18T11:39:43.355825Z","published":"2026-01-14T10:38:56Z","upstream":["CVE-2025-8291"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:0354"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402342"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0354.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2025-8291"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2025-8291"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8291"},{"type":"ARTICLE","url":"https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267"},{"type":"ARTICLE","url":"https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6"},{"type":"ARTICLE","url":"https://github.com/python/cpython/issues/139700"},{"type":"ARTICLE","url":"https://github.com/python/cpython/pull/139702"},{"type":"ARTICLE","url":"https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/"}],"affected":[{"package":{"name":"python3.12","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-debug","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-debug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-debugsource","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-devel","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-idle","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-idle"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-libs","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-test","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-tkinter","ecosystem":"Red Hat:rhel_eus:9.4::appstream","purl":"pkg:rpm/redhat/python3.12-tkinter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-debug","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-debug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-debuginfo","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-debugsource","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-devel","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-idle","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-idle"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-libs","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-test","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}},{"package":{"name":"python3.12-tkinter","ecosystem":"Red Hat:rhel_eus:9.4::crb","purl":"pkg:rpm/redhat/python3.12-tkinter"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.1-4.el9_4.8"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:0354.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}]}