Skip to content
OpenAdvisories
High RHSA-2026:38091 3 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 11, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python3.14 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-debug 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-devel 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-debug 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-devel 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-idle 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-libs 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-test 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-tkinter 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-idle 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-libs 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-test 0:3.14.6-1.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-tkinter 0:3.14.6-1.4.hum1

Vulnerabilities 3

  • High 7.8
    CVE-2026-11940

    tarfile extraction filter bypass allows escaping the destination directory

    tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction fallback validated the symlink at it's archived location but re…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Alpine Wolfi
  • High 7.5
    CVE-2025-4330

    Extraction filter bypass for linking outside extraction directory

    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

    Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2026-8723

    qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly

    ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's null-related options (`skipNulls`, `strict…

    ljharb qs langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-4330
  • report
    https://access.redhat.com/security/cve/CVE-2026-11940
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-8723
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38091.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2370014
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-4330
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-4330
  • article
    https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f
  • article
    https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a
  • article
    https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a
  • article
    https://github.com/python/cpython/issues/135034
  • article
    https://github.com/python/cpython/pull/135037
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2478227
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-8723
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-8723
  • article
    https://github.com/ljharb/qs/commit/21f80b33e5c8b3f7eba1034fff0da4a4a37a1d41
  • article
    https://github.com/ljharb/qs/security/advisories/GHSA-q8mj-m7cp-5q26
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2491848
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-11940
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-11940
  • article
    https://github.com/python/cpython/issues/151558
  • article
    https://github.com/python/cpython/pull/151559
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/