Red Hat Security Advisory

RHSA-2026:58971

python3.12 security update

Released 2026-08-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3.12-3.12.14-1.el8_10, python3.12-devel-3.12.14-1.el8_10, python3.12-libs-3.12.14-1.el8_10 +2
Red Hat Enterprise Linux CRB (v. 8) python3.12-3.12.14-1.el8_10, python3.12-debug-3.12.14-1.el8_10, python3.12-idle-3.12.14-1.el8_10 +2

Fixes 1 record

TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467

tarfile extraction filter bypass allows escaping the destination directory

MEDIUM 41

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.0075 Published 2026-06-23 Partial fix · 3.10.21, 3.11.16 +4 CWE-22