RHSA-2026:38017HighCVSS 7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
🔗 CVE IDs covered (2)
📋 Description
CVE-2025-4330 — cpython: python: Extraction filter bypass for linking outside extraction directory CVE-2026-15308 — python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:38017
- externalhttps://access.redhat.com/security/cve/CVE-2025-4330
- externalhttps://access.redhat.com/security/cve/CVE-2026-11940
- externalhttps://access.redhat.com/security/cve/CVE-2026-15308
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://images.redhat.com/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38017.json