Red Hat Security Advisory

RHSA-2026:28581

python3.14 security, bug fix, and enhancement update

Released 2026-06-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) python3.14-3.14.5-1.el10_2, python3.14-devel-3.14.5-1.el10_2, python3.14-libs-3.14.5-1.el10_2 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) python3.14-debug-3.14.5-1.el10_2, python3.14-freethreading-3.14.5-1.el10_2, python3.14-freethreading-debug-3.14.5-1.el10_2 +7

TI-2026-04175 CVE-2026-4786 · GHSA-cccx-m78h-m3xw

LOW 33

Mitgation of CVE-2026-4519 was incomplete.

CVSS 4.0HIGH 7.0 Local No auth User interaction EPSS 0.0029 Published 2026-04-13 Partial fix · 3.10.21, 3.11.16 +4 CWE-77

TI-2026-05281 CVE-2026-6019 · GHSA-2755-2mm4-rm5c

LOW 11

http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00211 Published 2026-04-22 Partial fix · 3.13.14, 3.14.5rc1 +1 CWE-150