Red Hat Security Advisory

RHSA-2026:1408

python3.12 security update

Released 2026-01-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3.12-3.12.12-4.el9_7, python3.12-devel-3.12.12-4.el9_7, python3.12-libs-3.12.12-4.el9_7 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3.12-3.12.12-4.el9_7, python3.12-debug-3.12.12-4.el9_7, python3.12-idle-3.12.12-4.el9_7 +2

Fixes 2 records

TI-2025-11081 CVE-2025-12084 · GHSA-hfqx-732w-xrrw

Quadratic complexity in node ID cache clearing

LOW 36

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00856 Published 2025-12-03 Partial fix · 3.10.20, 3.11.15 +4 CWE-407

TI-2025-12644 CVE-2025-13836 · GHSA-399h-rrqc-rpgv

Excessive read buffering DoS in http.client

LOW 32

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01748 Published 2025-12-01 Partial fix · 3.10.20, 3.11.15 +4 CWE-400