Critical Security Vulnerability in python3.12: Red Hat Security Advisory RHSA-2026:77017
Summary
RHSA-2026:77017: Red Hat Security Advisory: python3.12 security update. Affects python3.12 versions < 0:3.12.15-1.el9_8. Fixed in 0:3.12.15-1.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python3.12 is a widely used programming language package in the Red Hat Enterprise Linux ecosystem, known for its versatility and extensive libraries. It serves as a core component for many applications, providing essential functionalities for software development. However, recent security advisories have highlighted vulnerabilities that could compromise the integrity and security of systems utilizing this package.
Vulnerability Detail
The vulnerabilities identified as CVE-2026-19445 and CVE-2026-19553 in python3.12 arise from flaws in the package that could allow unauthorized access and manipulation of sensitive data. These vulnerabilities could lead to severe ramifications, including data breaches and system compromises. The technical aspects involve potential exploitation through crafted inputs that bypass security checks, making it critical for users to address these issues promptly.
How To Fix
Minimum fixed version
0:3.12.15-1.el9_8
This is the first release that contains the fix.
sudo dnf update python3.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected systems and monitor for any unusual activity until the package is updated. Additionally, consider implementing application-level security measures to mitigate potential exploitation.
Conclusion
The vulnerabilities in python3.12 pose significant risks to systems running this package. It is crucial for users to update to the patched version to safeguard their applications and data. By following the outlined steps and utilizing available resources, users can effectively mitigate the risks associated with these vulnerabilities.
See every vulnerability recorded for python3.12 →
FAQ
The main vulnerabilities are CVE-2026-19445 and CVE-2026-19553, which could allow unauthorized access and manipulation of data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
If immediate updates are not possible, implement access restrictions and monitor system activity as a temporary workaround.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:77017.json.
Related vulnerabilities
Recent vulnerabilities recorded for python3.12.
