Skip to content
VulniPulse
Sign in
Advisory severityHigh7.1Red Hat Linux

High [CVE-2026-82049] Python tarfile module: File modification and content disclosure via crafted archives

This high-severity Red Hat Linux advisory covers CVE-2026-82049; related products: Red Hat Hardened Images.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-82049 Source published Source updated

VulniPulse record published Record updated

CVE-2026-82049
Related products & platforms
Red Hat LinuxUnclassified
Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Python tarfile module: File modification and content disclosure via crafted archives. Red Hat rates this important (CVSS 7.1).

Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:68135 with package python3-11-main-3.11.16-1.4.hum1, python3-12-main-3.12.14-1.3.hum1, python3-10-main-3.10.21-1.3.hum1, python3-13-main-3.13.15-1.3.hum1.

Affected product named by the advisory: Red Hat Hardened Images.

Affected versions
  • 3.13

Official advisory · high-confidence parse· fetched 14 days ago·verify at source

Fixed versions
  • python3-11-main-3.11.16-1.4.hum1
  • python3-12-main-3.12.14-1.3.hum1
  • python3-10-main-3.10.21-1.3.hum1
  • python3-13-main-3.13.15-1.3.hum1
  • python3-14-main-3.14.7-1.1.hum1
  • RHSA-2026:68135

Official advisory · high-confidence parse· fetched 14 days ago·verify at source

Mitigation

Upgrade to a fixed release: python3-11-main-3.11.16-1.4.hum1, python3-12-main-3.12.14-1.3.hum1, python3-10-main-3.10.21-1.3.hum1, python3-13-main-3.13.15-1.3.hum1, python3-14-main-3.14.7-1.1.hum1, RHSA-2026:68135. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 14 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.