ALAS2023-2026-1556


Amazon Linux 2023 Security Advisory: ALAS2023-2026-1556
Advisory Released Date: 2026-04-13
Advisory Updated Date: 2026-04-13
Severity: Important

Issue Overview:

The webbrowser.open() API would accept leading dashes in the URL which
could be handled as command line options for certain web browsers. New
behavior rejects leading dashes. Users are recommended to sanitize URLs
prior to passing to webbrowser.open(). (CVE-2026-4519)


Affected Packages:

python3.14


Issue Correction:
Run dnf update python3.14 --releasever 2023.11.20260413 or dnf update --advisory ALAS2023-2026-1556 --releasever 2023.11.20260413 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    python3.14-tkinter-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-idle-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-debugsource-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-devel-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-tkinter-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-idle-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-debug-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-devel-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-debug-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-libs-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-debuginfo-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-libs-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-freethreading-test-3.14.2-2.amzn2023.0.4.aarch64
    python3.14-test-3.14.2-2.amzn2023.0.4.aarch64

src:
    python3.14-3.14.2-2.amzn2023.0.4.src

x86_64:
    python3.14-freethreading-tkinter-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-tkinter-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-freethreading-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-freethreading-devel-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-freethreading-idle-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-debug-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-devel-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-debugsource-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-freethreading-debug-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-libs-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-test-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-idle-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-freethreading-libs-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-debuginfo-3.14.2-2.amzn2023.0.4.x86_64
    python3.14-freethreading-test-3.14.2-2.amzn2023.0.4.x86_64