Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | python-unversioned-command | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3 | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-debug | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-devel | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-idle | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-libs | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-test | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3-tkinter | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14 | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading-debug | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading-devel | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading-idle | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading-libs | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading-test | 0:3.14.10-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | python3.14-freethreading-tkinter | 0:3.14.10-1.hum1 |
Vulnerabilities 2
-
Critical 9.4
Distrust compromised intermediate certificates in ssl module
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configur…
-
Medium 6.9
tar filter allows writing outside destination via empty-named symlink
tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extracta…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2026-115557
-
article
https://access.redhat.com/security/updates/classification/
-
report
https://access.redhat.com/security/cve/CVE-2026-114583
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92066.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2559388
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-114583
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-114583
-
article
https://github.com/python/cpython/issues/160097
-
article
https://github.com/python/cpython/pull/160098
-
article
https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2560301
-
article
https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-115557
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-115557
-
article
https://emudhra.we-have-a-problem.com/
-
article
https://github.com/python/cpython/issues/160040
-
article
https://github.com/python/cpython/pull/160042
-
article
https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/