Red Hat Security Advisory

RHSA-2026:1828

python3.12 security update

Released 2026-02-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) python-unversioned-command-3.12.12-3.el10_1, python3-devel-3.12.12-3.el10_1, python3-tkinter-3.12.12-3.el10_1
Red Hat Enterprise Linux BaseOS (v. 10) python3-3.12.12-3.el10_1, python3-libs-3.12.12-3.el10_1, python3.12-3.12.12-3.el10_1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) python3-debug-3.12.12-3.el10_1, python3-idle-3.12.12-3.el10_1, python3-test-3.12.12-3.el10_1

Fixes 2 records

TI-2025-11081 CVE-2025-12084 · GHSA-hfqx-732w-xrrw

Quadratic complexity in node ID cache clearing

LOW 36

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00856 Published 2025-12-03 Partial fix · 3.10.20, 3.11.15 +4 CWE-407

TI-2025-12644 CVE-2025-13836 · GHSA-399h-rrqc-rpgv

Excessive read buffering DoS in http.client

LOW 32

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01748 Published 2025-12-01 Partial fix · 3.10.20, 3.11.15 +4 CWE-400