RHSA-2026:19176
Advisory lineage Upstream: 9 Downstream: 0
Published: 20 May 2026, 10:10
Last modified:11 Sept 2026, 10:05
Vulnerability Summary
Overall Risk (default)
medium
32/100 CVSS Score
8.1 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
20 May 2026, 10:10
Published
Vulnerability first disclosed
11 Sept 2026, 10:05
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: python3.14 security update
CVSS Metrics
- v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Systems
- redhat•python3.14
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-debug
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-debuginfo
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-debugsource
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-devel
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading-debug
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading-devel
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading-idle
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading-libs
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading-test
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-freethreading-tkinter
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-idle
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-libs
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-test
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
- redhat•python3.14-tkinter
< 0:3.14.4-2.el9_8 | < 0:3.14.4-2.el9_8
References (76)
- https://access.redhat.com/errata/RHSA-2026:19176
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2431367
- https://bugzilla.redhat.com/show_bug.cgi?id=2444691
- https://bugzilla.redhat.com/show_bug.cgi?id=2448168
- https://bugzilla.redhat.com/show_bug.cgi?id=2448181
- https://bugzilla.redhat.com/show_bug.cgi?id=2449649
- https://bugzilla.redhat.com/show_bug.cgi?id=2457409
- https://bugzilla.redhat.com/show_bug.cgi?id=2457932
- https://bugzilla.redhat.com/show_bug.cgi?id=2458049
- https://bugzilla.redhat.com/show_bug.cgi?id=2458239
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19176.json
- https://access.redhat.com/security/cve/CVE-2026-0865
- https://www.cve.org/CVERecord?id=CVE-2026-0865
- https://nvd.nist.gov/vuln/detail/CVE-2026-0865
- https://github.com/python/cpython/issues/143916
- https://github.com/python/cpython/pull/143917
- https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/
- https://access.redhat.com/security/cve/CVE-2026-1502
- https://www.cve.org/CVERecord?id=CVE-2026-1502
- https://nvd.nist.gov/vuln/detail/CVE-2026-1502
- https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69
- https://github.com/python/cpython/issues/146211
- https://github.com/python/cpython/pull/146212
- https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/
- https://access.redhat.com/security/cve/CVE-2026-2297
- https://www.cve.org/CVERecord?id=CVE-2026-2297
- https://nvd.nist.gov/vuln/detail/CVE-2026-2297
- https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e
- https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e
- https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86
- https://github.com/python/cpython/issues/145506
- https://github.com/python/cpython/pull/145507
- https://access.redhat.com/security/cve/CVE-2026-3644
- https://www.cve.org/CVERecord?id=CVE-2026-3644
- https://nvd.nist.gov/vuln/detail/CVE-2026-3644
- https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4
- https://github.com/python/cpython/issues/145599
- https://github.com/python/cpython/pull/145600
- https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
- https://access.redhat.com/security/cve/CVE-2026-4224
- https://www.cve.org/CVERecord?id=CVE-2026-4224
- https://nvd.nist.gov/vuln/detail/CVE-2026-4224
- https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a
- https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3
- https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768
- https://github.com/python/cpython/issues/145986
- https://github.com/python/cpython/pull/145987
- https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/
- https://access.redhat.com/security/cve/CVE-2026-4519
- https://www.cve.org/CVERecord?id=CVE-2026-4519
- https://nvd.nist.gov/vuln/detail/CVE-2026-4519
- https://github.com/python/cpython/issues/143930
- https://github.com/python/cpython/pull/143931
- https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/
- https://access.redhat.com/security/cve/CVE-2026-4786
- https://www.cve.org/CVERecord?id=CVE-2026-4786
- https://nvd.nist.gov/vuln/detail/CVE-2026-4786
- https://github.com/python/cpython/issues/148169
- https://github.com/python/cpython/pull/148170
- https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/
- https://access.redhat.com/security/cve/CVE-2026-5713
- https://www.cve.org/CVERecord?id=CVE-2026-5713
- https://nvd.nist.gov/vuln/detail/CVE-2026-5713
- https://github.com/python/cpython/issues/148178
- https://github.com/python/cpython/pull/148187
- https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/
- https://access.redhat.com/security/cve/CVE-2026-6100
- https://www.cve.org/CVERecord?id=CVE-2026-6100
- https://nvd.nist.gov/vuln/detail/CVE-2026-6100
- https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d
- https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2
- https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20
- https://github.com/python/cpython/issues/148395
- https://github.com/python/cpython/pull/148396
- https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/