Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 7

Vulnerabilities 2

• Critical 9.4
  CVE-2026-115557

  Distrust compromised intermediate certificates in ssl module

  Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configur…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 24, 2026
• Medium 6.9
  CVE-2026-114583

  tar filter allows writing outside destination via empty-named symlink

  tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extracta…

  Python Software Foundation CPython tensorflow python3.4 Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 22, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-114583
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-115557
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90533.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2559388
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-114583
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-114583
• article
  https://github.com/python/cpython/issues/160097
• article
  https://github.com/python/cpython/pull/160098
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2560301
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-115557
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-115557
• article
  https://emudhra.we-have-a-problem.com/
• article
  https://github.com/python/cpython/issues/160040
• article
  https://github.com/python/cpython/pull/160042
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/