Red Hat Security Advisory

RHSA-2026:5393

python security update

Released 2026-03-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) python-2.7.5-94.el7_9.3, python-devel-2.7.5-94.el7_9.3, python-libs-2.7.5-94.el7_9.3 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) python-debug-2.7.5-94.el7_9.3, python-test-2.7.5-94.el7_9.3, python-tools-2.7.5-94.el7_9.3 +1

TI-2025-14016 CVE-2025-15367 · GHSA-g82h-mgfp-jx8g

LOW 29

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00377 Published 2026-01-20 Partial fix · 3.15.0a6 CWE-77

TI-2025-14015 CVE-2025-15366 · GHSA-4c67-8q63-xrxq

LOW 29

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00431 Published 2026-01-20 Partial fix · 3.13.15, 3.14.7 +1 CWE-77