Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
Red Hat Hardened Images: Privilege Escalation Risk
published 3 months ago
Summary
Red Hat has released a security update to fix a vulnerability in Red Hat Hardened Images. This update is important because it prevents attackers from gaining elevated privileges on the system, which could lead to unauthorized access and data breaches. IT teams should apply the update to their Red Hat Hardened Images as soon as possible to ensure the security of their systems.
What to do
- Update redhat python3.14 to version 0:3.14.6-1.4.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | python3.14 |
< 0:3.14.6-1.4.hum1 Fix: upgrade to 0:3.14.6-1.4.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
References
- https://access.redhat.com/errata/RHSA-2026:38091 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-4330 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-11940 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://images.redhat.com/ Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38091.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2370014 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-4330 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-4330 Vendor Advisory
- https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f Third Party Advisory
- https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390... Third Party Advisory
- https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2... Third Party Advisory
- https://github.com/python/cpython/issues/135034 Third Party Advisory
- https://github.com/python/cpython/pull/135037 Third Party Advisory
- https://mail.python.org/archives/list/[email protected]/thread/MAXIJJ... Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published11 Jul 2026
Updated11 Jul 2026
First seen11 Jul 2026
Sources
RHSA-2026:38091 · OSV
Track software like this
Free during beta