Red Hat Security Advisory

RHSA-2026:35807

Red Hat Hardened Images RPMs Security Update

Released 2026-07-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images python3.11-3.11.15-4.4.hum1@aarch64, python3.11-3.11.15-4.4.hum1@src, python3.11-3.11.15-4.4.hum1@x86_64 +12

Fixes 1 record

TI-2026-10316 CVE-2026-11972 · GHSA-wqxf-pjxh-hh4h

tarfile opened in streaming mode mishandles EOF

LOW 37

When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00715 Published 2026-06-23 Partial fix · 3.10.21, 3.11.16 +4 CWE-252