TI-2026-03796 CVE-2026-4360 · GHSA-gf2w-jqmq-fcm8
Tarfile.extract() doesn't fully respect filter parameter
Priority LOW 11
In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks.
RHSA-2026:47915
Red Hat Hardened Images RPMs Security Update
Released 2026-07-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images python3.11-3.11.15-5.4.hum1@aarch64, python3.11-3.11.15-5.4.hum1@src, python3.11-3.11.15-5.4.hum1@x86_64 +12