Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11 | 0:3.11.15-5.5.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11-debug | 0:3.11.15-5.5.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11-devel | 0:3.11.15-5.5.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11-idle | 0:3.11.15-5.5.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11-libs | 0:3.11.15-5.5.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11-test | 0:3.11.15-5.5.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.11-tkinter | 0:3.11.15-5.5.hum1 |
Vulnerabilities 1
-
Low 2.0
Quadratic Behavior in xml.etree.ElementPath Index Predicates
`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the firs…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-6879
-
article
https://access.redhat.com/security/updates/classification/
-
article
https://images.redhat.com/
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48253.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2508122
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-6879
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6879
-
article
https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0
-
article
https://github.com/python/cpython/issues/152674
-
article
https://github.com/python/cpython/pull/152676
-
article
https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/