RHSA-2026:98533MediumCVSS 6.8

Red Hat Security Advisory: python3.9 security update

Published
November 11, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (2)

CVE-2026-103995 →CVE-2026-115557 →

📋 Description

CVE-2026-103995 — python: python: Misinterpretation of HTTP responses via invalid chunk parsing CVE-2026-115557 — python: Distrust compromised eMudhra intermediate certificates in Python ssl module

🎯 Affected products70

  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Enterprise Linux BaseOS (v. 9)
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python-unversioned-command-0:3.9.25-16.el9_9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • python3-0:3.9.25-16.el9_9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-0:3.9.25-16.el9_9.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-0:3.9.25-16.el9_9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-0:3.9.25-16.el9_9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-0:3.9.25-16.el9_9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-debug-0:3.9.25-16.el9_9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-debug-0:3.9.25-16.el9_9.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-debug-0:3.9.25-16.el9_9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-debug-0:3.9.25-16.el9_9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-debug-0:3.9.25-16.el9_9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-devel-0:3.9.25-16.el9_9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • python3-devel-0:3.9.25-16.el9_9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • python3-devel-0:3.9.25-16.el9_9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • python3-devel-0:3.9.25-16.el9_9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • python3-devel-0:3.9.25-16.el9_9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • python3-idle-0:3.9.25-16.el9_9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-idle-0:3.9.25-16.el9_9.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-idle-0:3.9.25-16.el9_9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-idle-0:3.9.25-16.el9_9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-idle-0:3.9.25-16.el9_9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • python3-libs-0:3.9.25-16.el9_9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-libs-0:3.9.25-16.el9_9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-libs-0:3.9.25-16.el9_9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-libs-0:3.9.25-16.el9_9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-libs-0:3.9.25-16.el9_9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
  • python3-test-0:3.9.25-16.el9_9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • +40 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Users of Python RPM packages in Red Hat Enterprise Linux can resolve the eMudhra weak intermediate CA certificates issue by installing updated ca-certificates packages fixing CVE-2026-114406. Also refer to the detailed information in the RHSB-2026-012 security bulletin for other mitigation steps if updating ca-certificates packages is not possible.

🔗 References (4)