This Red Hat security advisory (RHSA-2026:38017) addresses multiple vulnerabilities in python3.12 packages included in Red Hat Hardened Images. The update provides new RPM versions (python3.12-3.12.13-3.5.hum1 and related packages) for aarch64 and x86_64 architectures. The vulnerabilities fixed include CVE-2025-4330, CVE-2026-11940, and CVE-2026-15308, which are associated with path traversal and logic errors (CWE-22 and CWE-835). The advisory does not specify affected version ranges or detailed exploitation information, nor does it indicate known exploits in the wild. The update is available from Red Hat's official repositories and image services.

The vulnerabilities addressed could allow an attacker to exploit path traversal or logic flaws in the python3.12 packages within Red Hat Hardened Images, potentially leading to unauthorized file access or denial of service conditions. The advisory classifies the severity as high but does not provide further details on exploitation or impact scope. No known exploits in the wild have been reported at this time.

Red Hat has released updated RPM packages (python3.12-3.12.13-3.5.hum1 and related) that fix the identified vulnerabilities. Users of Red Hat Hardened Images with python3.12 packages should apply these updates promptly by following the instructions at https://images.redhat.com/. Patch status is confirmed by the vendor advisory, indicating an official fix is available. No additional mitigation steps are specified or required beyond applying the update.