Red Hat Security AdvisoryRHSA-2026:11324
Red Hat Hardened Images RPMs Security Update
Released 2026-04-28 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Hardened Images python3.11-3.11.15-4.2.hum1@aarch64, python3.11-3.11.15-4.2.hum1@src, python3.11-3.11.15-4.2.hum1@x86_64 +12
Fixes 2 records
Priority LOW 10
The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK.
CVSS 4.0LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00183 · Published 2026-03-12 · Partial fix · 3.10.21, 3.11.16 +4 CWE-20
Priority LOW 2
DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open().
CVSS 4.0N/A 0.0· Physical · No auth · No interaction · EPSS 0.00253 · Published 2026-03-18 · Partial fix · 3.13.13, 3.14.4 +1 CWE-22
