Critical Security Update for Python 3.14: Addressing Vulnerabilities in Red Hat Enterprise Linux
Summary
RHSA-2026:77018: Red Hat Security Advisory: python3.14 security update. Affects python3.14 versions < 0:3.14.8-1.el10_2. Fixed in 0:3.14.8-1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python 3.14 is a widely used programming language that supports multiple programming paradigms, including procedural, object-oriented, and functional programming. It is integral to many applications and systems, providing essential libraries and frameworks for development. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing this version, particularly in Red Hat Enterprise Linux 10.2.
Vulnerability Detail
The vulnerabilities identified in Python 3.14, cataloged under CVE-2026-19445 and CVE-2026-19553, stem from flaws that could allow unauthorized access and manipulation of data. These vulnerabilities could lead to severe consequences, including data breaches and system compromise. The CVSS score of 8.1 indicates a high severity level, emphasizing the urgency for remediation.
How To Fix
Minimum fixed version
0:3.14.8-1.el10_2
This is the first release that contains the fix.
sudo dnf update python3.14
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected systems and monitor for any unusual activity until the update can be applied. Additionally, consider disabling any non-essential services that rely on Python 3.14 until the vulnerability is resolved.
Conclusion
The vulnerabilities in Python 3.14 pose a significant risk to systems running Red Hat Enterprise Linux 10.2. It is crucial to update to the patched version 3.14.8-1.el10_2 to mitigate these risks. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for python3.14 →
FAQ
The vulnerabilities, CVE-2026-19445 and CVE-2026-19553, could allow unauthorized access and manipulation of data, posing significant security risks.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for the vulnerabilities in Python 3.14 is 8.1, indicating a high severity level.
If immediate updates are not possible, restrict access to the affected systems and monitor for unusual activity as a temporary workaround.
Detailed information about the vulnerabilities can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:77018.json.
Related vulnerabilities
Recent vulnerabilities recorded for python3.14.