Red Hat Security Advisory

RHSA-2026:1537

python security update

Released 2026-01-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) python-2.7.5-94.el7_9.2, python-devel-2.7.5-94.el7_9.2, python-libs-2.7.5-94.el7_9.2 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) python-debug-2.7.5-94.el7_9.2, python-test-2.7.5-94.el7_9.2, python-tools-2.7.5-94.el7_9.2 +1

Fixes 1 record

TI-2025-11081 CVE-2025-12084 · GHSA-hfqx-732w-xrrw

Quadratic complexity in node ID cache clearing

LOW 36

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00856 Published 2025-12-03 Partial fix · 3.10.20, 3.11.15 +4 CWE-407