Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 16

Vulnerabilities 5

• Critical 9.1
  CVE-2026-6100

  Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

  Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under …

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 13, 2026
• High 7.0
  CVE-2026-4786

  Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

  Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 13, 2026
• Medium 5.9
  CVE-2025-15366

  IMAP command injection in user-controlled commands

  The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 20, 2026
• Medium 5.7
  CVE-2026-1502

  HTTP client proxy tunnel headers not validated for CR/LF

  CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 10, 2026
• Medium 5.3
  CVE-2026-5713

  Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

  The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to read and write addresses in a privileged process if that process connected to a ma…

  Python Software Foundation CPython python3.14 python3.14 Debian Ubuntu
  Apr 14, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-4786
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-5713
• report
  https://access.redhat.com/security/cve/CVE-2026-6100
• report
  https://access.redhat.com/security/cve/CVE-2026-1502
• report
  https://access.redhat.com/security/cve/CVE-2025-15366
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9228.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2431368
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-15366
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-15366
• article
  https://github.com/python/cpython/issues/143921
• article
  https://github.com/python/cpython/pull/143922
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457409
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-1502
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-1502
• article
  https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69
• article
  https://github.com/python/cpython/issues/146211
• article
  https://github.com/python/cpython/pull/146212
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2458049
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-4786
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-4786
• article
  https://github.com/python/cpython/issues/148169
• article
  https://github.com/python/cpython/pull/148170
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2458239
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5713
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5713
• article
  https://github.com/python/cpython/issues/148178
• article
  https://github.com/python/cpython/pull/148187
• article
  https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457932
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-6100
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-6100
• article
  https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d
• article
  https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2
• article
  https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20