Red Hat Security Advisory

RHSA-2026:50816

python3 security update

Released 2026-08-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) platform-python-3.6.8-39.el8_4.12, platform-python-debug-3.6.8-39.el8_4.12, platform-python-devel-3.6.8-39.el8_4.12 +3
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) platform-python-3.6.8-39.el8_4.12, platform-python-debug-3.6.8-39.el8_4.12, platform-python-devel-3.6.8-39.el8_4.12 +3
Red Hat Enterprise Linux BaseOS AUS (v.8.4) platform-python-3.6.8-39.el8_4.12, python3-3.6.8-39.el8_4.12, python3-libs-3.6.8-39.el8_4.12 +1
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) platform-python-3.6.8-39.el8_4.12, python3-3.6.8-39.el8_4.12, python3-libs-3.6.8-39.el8_4.12 +1

Fixes 1 record

TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

MEDIUM 45

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00637 Published 2026-07-09 Partial fix · 3.10.21, 3.11.16 +4 CWE-400