RHSA-2026:58420MediumCVSS 6.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
August 21, 2026
Last Modified
August 24, 2026

🔗 CVE IDs covered (4)

CVE-2026-3446 →CVE-2026-3479 →CVE-2026-6019 →CVE-2026-18503 →

📋 Description

CVE-2026-3446 — python: Python base64: Incomplete data decoding due to premature stop at padding CVE-2026-3479 — python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation CVE-2026-6019 — python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module CVE-2026-18503 — python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()

🎯 Affected products4

  • Red Hat Hardened Images
  • python3-12-main@aarch64 as a component of Red Hat Hardened Images
  • python3-12-main@src as a component of Red Hat Hardened Images
  • python3-12-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Do not pass untrusted or unbounded CSV input to csv.Sniffer.sniff(). If dialect detection is needed, limit the size of the sample passed to sniff() or use a known dialect directly with csv.reader().

🔗 References (8)