Red Hat Security Advisory

RHSA-2026:6035

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-03-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images python3.12-3.12.13-2.hum1@aarch64, python3.12-3.12.13-2.hum1@src, python3.12-3.12.13-2.hum1@x86_64 +12

TI-2026-03926 CVE-2026-4519 · GHSA-rm92-fj5q-mpj5

LOW 33

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.

CVSS 4.0HIGH 7.0 Local No auth User interaction EPSS 0.0032 Published 2026-03-20 Fixed in 3.10.21, 3.11.16 +4 CWE-20