Red Hat Security Advisory: python3.12 security update
A security update for python3.12 on Red Hat Enterprise Linux 9 addresses two vulnerabilities: CVE-2026-6100, a use-after-free in decompression modules that can lead to arbitrary code execution or information disclosure, and CVE-2026-4786, a command injection vulnerability in the webbrowser.open() API allowing arbitrary code execution. These issues have been rated as important by Red Hat Product Security. The update is available for multiple Red Hat Enterprise Linux 9 variants and related CodeReady Linux Builder products. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.
AI Analysis
Technical Summary
Red Hat issued a security advisory (RHSA-2026:10745) for python3.12 on Red Hat Enterprise Linux 9 addressing two vulnerabilities. CVE-2026-6100 involves a use-after-free flaw in decompression modules that could lead to arbitrary code execution or information disclosure. CVE-2026-4786 is a command injection vulnerability in the Python webbrowser.open() API that allows arbitrary code execution. The advisory rates the impact as important and provides updated packages to remediate these issues. The advisory covers multiple architectures and variants of Red Hat Enterprise Linux 9 and CodeReady Linux Builder. No CVSS base scores are included in the advisory, and no known exploits in the wild have been reported.
Potential Impact
The vulnerabilities allow for arbitrary code execution and potential information disclosure, posing a significant security risk to affected systems running python3.12 on Red Hat Enterprise Linux 9. Successful exploitation could compromise system integrity or leak sensitive information. However, there are no known exploits in the wild currently.
Mitigation Recommendations
Red Hat has released updated python3.12 packages for Red Hat Enterprise Linux 9 and related products that address these vulnerabilities. Users should apply the provided security updates as detailed in the Red Hat advisory RHSA-2026:10745 and the referenced article https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified. Patch status is confirmed as an official fix available from Red Hat.
Red Hat Security Advisory: python3.12 security update
Description
A security update for python3.12 on Red Hat Enterprise Linux 9 addresses two vulnerabilities: CVE-2026-6100, a use-after-free in decompression modules that can lead to arbitrary code execution or information disclosure, and CVE-2026-4786, a command injection vulnerability in the webbrowser.open() API allowing arbitrary code execution. These issues have been rated as important by Red Hat Product Security. The update is available for multiple Red Hat Enterprise Linux 9 variants and related CodeReady Linux Builder products. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat issued a security advisory (RHSA-2026:10745) for python3.12 on Red Hat Enterprise Linux 9 addressing two vulnerabilities. CVE-2026-6100 involves a use-after-free flaw in decompression modules that could lead to arbitrary code execution or information disclosure. CVE-2026-4786 is a command injection vulnerability in the Python webbrowser.open() API that allows arbitrary code execution. The advisory rates the impact as important and provides updated packages to remediate these issues. The advisory covers multiple architectures and variants of Red Hat Enterprise Linux 9 and CodeReady Linux Builder. No CVSS base scores are included in the advisory, and no known exploits in the wild have been reported.
Potential Impact
The vulnerabilities allow for arbitrary code execution and potential information disclosure, posing a significant security risk to affected systems running python3.12 on Red Hat Enterprise Linux 9. Successful exploitation could compromise system integrity or leak sensitive information. However, there are no known exploits in the wild currently.
Mitigation Recommendations
Red Hat has released updated python3.12 packages for Red Hat Enterprise Linux 9 and related products that address these vulnerabilities. Users should apply the provided security updates as detailed in the Red Hat advisory RHSA-2026:10745 and the referenced article https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are specified. Patch status is confirmed as an official fix available from Red Hat.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:10745
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-6100"]
- State
- PUBLISHED
Threat ID: 6a175eefe29bf47b50edd976
Added to database: 05/27/2026, 21:15:27 UTC
Last enriched: 08/10/2026, 20:09:09 UTC
Last updated: 09/14/2026, 10:01:31 UTC
Views: 185
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.