Red Hat Security Advisory

RHSA-2026:1892

python3.11 security update

Released 2026-02-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) python3.11-3.11.11-2.el9_6.4, python3.11-debug-3.11.11-2.el9_6.4, python3.11-idle-3.11.11-2.el9_6.4 +2
Red Hat Enterprise Linux AppStream EUS (v.9.6) python3.11-3.11.11-2.el9_6.4, python3.11-devel-3.11.11-2.el9_6.4, python3.11-libs-3.11.11-2.el9_6.4 +1

Fixes 2 records

TI-2025-11081 CVE-2025-12084 · GHSA-hfqx-732w-xrrw

Quadratic complexity in node ID cache clearing

LOW 36

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00856 Published 2025-12-03 Partial fix · 3.10.20, 3.11.15 +4 CWE-407

TI-2025-12644 CVE-2025-13836 · GHSA-399h-rrqc-rpgv

Excessive read buffering DoS in http.client

LOW 32

When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01748 Published 2025-12-01 Partial fix · 3.10.20, 3.11.15 +4 CWE-400