TI-2026-02782 CVE-2026-3219 · GHSA-58qw-9mgm-455v
pip doesn't reject concatenated ZIP and tar archives
Priority LOW 20
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file.
RHSA-2026:20074
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-05-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images python-pip-26.1.1-3.hum1@src, python-pip-wheel-26.1.1-3.hum1@noarch@public-hummingbird-aarch64-rpms, python-pip-wheel-26.1.1-3.hum1@noarch@public-hummingbird-x86_64-rpms +2