Red Hat Security Advisory

RHSA-2026:5588

python3 security update

Released 2026-03-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-74.el8_10, platform-python-debug-3.6.8-74.el8_10, platform-python-devel-3.6.8-74.el8_10 +3
Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-74.el8_10, python3-3.6.8-74.el8_10, python3-libs-3.6.8-74.el8_10 +1

Fixes 1 record

TI-2025-00794 CVE-2025-0938 · GHSA-5qjr-cj9f-phrx

URL parser allowed square brackets in domain names

LOW 31

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01545 Published 2025-01-31 Partial fix · 3.9.22, 3.10.17 +4 CWE-20