Red Hat Security AdvisoryRHSA-2026:0123
python3.12 security update
Released 2026-01-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) python3.12-3.12.12-1.el8_10, python3.12-devel-3.12.12-1.el8_10, python3.12-libs-3.12.12-1.el8_10 +2
- Red Hat Enterprise Linux CRB (v. 8) python3.12-3.12.12-1.el8_10, python3.12-debug-3.12.12-1.el8_10, python3.12-idle-3.12.12-1.el8_10 +2
Fixes 2 records
Priority MEDIUM 53
The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be assumed…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00466 · Published 2025-10-07 · Partial fix · 3.9.24, 3.10.19 +4 CWE-1285
Priority LOW 36
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00856 · Published 2025-12-03 · Partial fix · 3.10.20, 3.11.15 +4 CWE-407
