Threats Tagged 'cve-2026-17084'

Red Hat has issued a security update for Red Hat Hardened Images RPMs addressing a vulnerability identified as CVE-2026-17084 in python3.10 packages. The update includes multiple python3.10-related RPMs for aarch64 and x86_64 architectures. No specific details about the nature of the vulnerability or its exploitation are provided. The severity is assessed as medium.

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.

Red Hat has released a security update for Red Hat Hardened Images RPMs, specifically addressing multiple vulnerabilities in python3.13 packages. The update includes fixes for CVE-2026-15310, CVE-2026-15806, CVE-2026-19672, and CVE-2026-17084. The affected packages cover various python3.13 components for aarch64 and x86_64 architectures. The update is available and should be applied to mitigate the identified security issues.

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the "idna" codec) and the in_table_b2() function of the "stringprep" module. This only affects domain names containing characters that were not previously registered or had their Unicode attributes such as case-folding behavior updated since Unicode 3.2.0.