RHSA-2026:10118MediumCVSS 5.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
April 23, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (3)

CVE-2025-13462 →CVE-2026-3446 →CVE-2026-3479 →

📋 Description

CVE-2025-13462 — cpython: cpython: tarfile module misinterprets crafted tar archives leading to data integrity issues CVE-2026-3446 — python: Python base64: Incomplete data decoding due to premature stop at padding CVE-2026-3479 — python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

🎯 Affected products4

  • Red Hat Hardened Images
  • python3-12-main@aarch64 as a component of Red Hat Hardened Images
  • python3-12-main@src as a component of Red Hat Hardened Images
  • python3-12-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Avoid using Python's tarfile module to extract untrusted archives. If processing untrusted archives is required, delegate extraction to the system-level tar utility (via the subprocess module). For Python 3.12 or newer, you can instead enforce strict extraction filters using tarfile.data_filter to secure the module's extraction behavior. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)