RHSA-2026:35806MediumCVSS 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
July 5, 2026
Last Modified
October 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-11972 →

📋 Description

CVE-2026-11972 — python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

🎯 Affected products30

  • Red Hat Hardened Images
  • python3.14-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-0:3.14.6-1.2.hum1@src as a component of Red Hat Hardened Images
  • python3.14-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-debug-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-debug-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-devel-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-devel-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-debug-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-debug-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-devel-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-devel-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-idle-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-idle-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-libs-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-libs-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-test-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-test-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-tkinter-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-freethreading-tkinter-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-idle-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-idle-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-libs-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-libs-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-test-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-test-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images
  • python3.14-tkinter-0:3.14.6-1.2.hum1@aarch64 as a component of Red Hat Hardened Images
  • python3.14-tkinter-0:3.14.6-1.2.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Avoid using tarfile streaming mode (mode='r|') with untrusted tar archives. Use the standard file-based mode (mode='r') instead where possible.

🔗 References (5)