Path traversal in wheel - CVE-2026-24049

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU121929

Path traversal in wheel - CVE-2026-24049

Published: January 22, 2026


Vulnerability identifier: #VU121929
CSH Severity: Medium
CVSS v4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-24049
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in wheel unpack. A remote attacker can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files.


Affected software

wheel
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component
watsonx Code Assistant On Prem
Maximo Application Suite - Visual Inspection Component
SOAR QRadar Plugin App
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Public Cloud Module
Python 3 Module
openSUSE Leap
openEuler
Ubuntu
Fedora
IBM Watson Discovery for IBM Cloud Pak for Data
Ansible Automation Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3.12-rfc3339-validator (Red Hat package)
ansible-sign (Red Hat package)
python3.12-ruamel-yaml-clib (Red Hat package)
python3.12-nh3 (Red Hat package)
python3.12-pyasn1-modules (Red Hat package)
python3.12-insights-analytics-collector (Red Hat package)
python3.12-jsonschema-path (Red Hat package)
python3.12-drools-jpy (Red Hat package)
python3.12-distlib (Red Hat package)
python3.12-propcache (Red Hat package)
python3.12-subprocess-tee (Red Hat package)
python3.12-pathable (Red Hat package)
python3.12-colorama (Red Hat package)
python3.12-json-stream-rs-tokenizer (Red Hat package)
python3.12-galaxy-importer (Red Hat package)
python3.12-pyasn1 (Red Hat package)
python3.12-inflection (Red Hat package)
python3.12-gnupg (Red Hat package)
python3.12-sqlparse (Red Hat package)
aap-metrics-utility (Red Hat package)
python3.12-isodate (Red Hat package)
python3.12-openapi-schema-validator (Red Hat package)
python3.12-ptyprocess (Red Hat package)
python3.12-mccabe (Red Hat package)
python3.12-openapi-spec-validator (Red Hat package)
python3.12-defusedxml (Red Hat package)
python3.12-django-crum (Red Hat package)
python3.12-pytest-plus (Red Hat package)
python3.12-tabulate (Red Hat package)
python3.12-commonmark (Red Hat package)
python3.12-click-help-colors (Red Hat package)
python3.12-s3transfer (Red Hat package)
python3.12-pathspec (Red Hat package)
python3.12-lockfile (Red Hat package)
python3.12-rq-scheduler (Red Hat package)
python3.12-jpy (Red Hat package)
python3.12-ecdsa (Red Hat package)
python3.12-rpds-py (Red Hat package)
python3.12-ruamel-yaml (Red Hat package)
python3.12-prometheus-client (Red Hat package)
python3.12-openapi-core (Red Hat package)
python3.12-pulp-glue (Red Hat package)
python3.12-pulp-ansible (Red Hat package)
python3.12-drf-spectacular (Red Hat package)
python3.12-validators (Red Hat package)
python3.12-referencing (Red Hat package)
python-wheel
python3-wheel
python-wheel-wheel
python311-wheel
python3.12-wheel (Red Hat package)
python-wheel (Red Hat package)
wheel (Ubuntu package)
python313-wheel
mingw-python-wheel
python3.12-drf-nested-routers (Red Hat package)
python3.12-mypy-extensions (Red Hat package)
python3.12-janus (Red Hat package)
python3.12-ansible-sdk (Red Hat package)
python3.12-resolvelib (Red Hat package)
python3.12-ldap-filter (Red Hat package)
python3.12-jmespath (Red Hat package)
python3.12-asyncio-throttle (Red Hat package)
python3.12-persisting-theory (Red Hat package)
python3.12-crontab (Red Hat package)
automation-controller-fapolicyd (Red Hat package)
python3.12-djangorestframework-queryfields (Red Hat package)
python3.12-et-xmlfile (Red Hat package)
python3.12-pytest-sugar (Red Hat package)
python3.12-django-lifecycle (Red Hat package)
ansible-rulebook (Red Hat package)
automation-eda-controller (Red Hat package)
python3.12-brotli (Red Hat package)
python3.12-django-split-settings (Red Hat package)
python3.12-netaddr (Red Hat package)
python3.12-ansible-pylibssh (Red Hat package)
python3.12-enrich (Red Hat package)
python3.12-deprecated (Red Hat package)
python3.12-onigurumacffi (Red Hat package)
python3.12-xlwt (Red Hat package)
python3.12-requests-oauthlib (Red Hat package)
python3.12-parsley (Red Hat package)
python3.12-xmlsec (Red Hat package)
python3.12-aiosignal (Red Hat package)
python3.12-frozenlist (Red Hat package)
python3.12-odfpy (Red Hat package)
python3.12-url-normalize (Red Hat package)
python3.12-drf-access-policy (Red Hat package)
python3.12-freezegun (Red Hat package)
python3.12-jwcrypto (Red Hat package)
python3.12-pluggy (Red Hat package)
python3.12-jq (Red Hat package)
python3.12-pyproject-api (Red Hat package)
receptor (Red Hat package)
python3.12-uamqp (Red Hat package)
python3.12-websocket-client (Red Hat package)
python3.12-distro (Red Hat package)
python3.12-lazy-object-proxy (Red Hat package)
python3.12-pydantic (Red Hat package)
python3.12-django-storages (Red Hat package)
python3.12-markuppy (Red Hat package)
python3.12-django-dynamic-preferences (Red Hat package)
python3.12-wrapt (Red Hat package)
python3.12-python3-saml (Red Hat package)
python3.12-six (Red Hat package)
python3.12-yarl (Red Hat package)
python3.12-parse (Red Hat package)
python3.12-opentelemetry-contrib (Red Hat package)
python3.12-opentelemetry (Red Hat package)
python3.12-azure-core (Red Hat package)
python3.12-boto3 (Red Hat package)
python3.12-botocore (Red Hat package)
yamllint (Red Hat package)
python3.12-xds-protos (Red Hat package)
python3.12-grpcio (Red Hat package)
python3.12-googleapis-common-protos (Red Hat package)
python3.12-iniconfig (Red Hat package)
python3.12-croniter (Red Hat package)
pulpcore-selinux (Red Hat package)
python3.12-xlrd (Red Hat package)
python3.12-async-lru (Red Hat package)
uwsgi (Red Hat package)
python3.12-execnet (Red Hat package)
python3.12-markupsafe (Red Hat package)
python3.12-dpath (Red Hat package)
python3.12-backoff (Red Hat package)
python3.12-django-oauth-toolkit (Red Hat package)
python3.12-django-prometheus (Red Hat package)
python3.12-json-stream (Red Hat package)
python3.12-bracex (Red Hat package)
ansible-runner (Red Hat package)
python3.12-pyrad (Red Hat package)
python3.12-pygtrie (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python3.12-django-ansible-base (Red Hat package)
automation-gateway (Red Hat package)
python3.12-aiohappyeyeballs (Red Hat package)
python3.12-rq (Red Hat package)
python3.12-tacacs-plus (Red Hat package)
python3.12-urllib3 (Red Hat package)
python3.12-pyjwt (Red Hat package)
python3.12-dateutil (Red Hat package)
python3.12-semantic-version (Red Hat package)
python3.12-pycodestyle (Red Hat package)
bindep (Red Hat package)
ansible-core (Red Hat package)
python3.12-pygments (Red Hat package)
python3.12-pulp-container (Red Hat package)
python3.12-google-auth (Red Hat package)
python3.12-requests (Red Hat package)
python3.12-werkzeug (Red Hat package)
python3.12-django-ipware (Red Hat package)
python3.12-pyflakes (Red Hat package)
python3.12-termcolor (Red Hat package)
ansible-builder (Red Hat package)
python3.12-pyparsing (Red Hat package)
python3.12-django-picklefield (Red Hat package)
python3.12-openpyxl (Red Hat package)
python3.12-daemon (Red Hat package)
python3.12-jinja2 (Red Hat package)
python3.12-gitpython (Red Hat package)
python3.12-aiodns (Red Hat package)
python3.12-python3-openid (Red Hat package)
python3.12-django-rq (Red Hat package)
python3.12-oauthlib (Red Hat package)
python3.12-psycopg (Red Hat package)
python3.12-dynaconf (Red Hat package)
python3.12-django-import-export (Red Hat package)
python3.12-django-guid (Red Hat package)
python3.12-xxhash (Red Hat package)
python3.12-ldap (Red Hat package)
python3.12-tablib (Red Hat package)
python3.12-markdown (Red Hat package)
python3.12-asgiref (Red Hat package)
python3.12-pytest-xdist (Red Hat package)
python3.12-filelock (Red Hat package)
python3.12-aiohttp (Red Hat package)
python3.12-djangorestframework (Red Hat package)
python3.12-zipp (Red Hat package)
python3.12-marshmallow (Red Hat package)
python3.12-pulpcore (Red Hat package)
python3.12-django-auth-ldap (Red Hat package)
python3.12-channels (Red Hat package)
python3.12-daphne (Red Hat package)
python3.12-gitdb (Red Hat package)
python3.12-uritemplate (Red Hat package)
python3.12-django-extensions (Red Hat package)
python3.12-platformdirs (Red Hat package)
supervisor (Red Hat package)
python3.12-django (Red Hat package)
python3.12-pycares (Red Hat package)
python3.12-social-auth-core (Red Hat package)
python3.12-redis (Red Hat package)
automation-controller (Red Hat package)
python3.12-pexpect (Red Hat package)
python3.12-rsa (Red Hat package)
python3.12-galaxy-ng (Red Hat package)
automation-hub (Red Hat package)
python3.12-typing-extensions (Red Hat package)
python3.12-tox (Red Hat package)
python3.12-jsonschema (Red Hat package)
python3.12-smmap (Red Hat package)
python3.12-watchdog (Red Hat package)
python3.12-django-flags (Red Hat package)
python3.12-chardet (Red Hat package)
python3.12-lxml (Red Hat package)
python3.12-cachetools (Red Hat package)
python3.12-podman (Red Hat package)
python3.12-django-redis (Red Hat package)
python3.12-social-auth-app-django (Red Hat package)
python3.12-protobuf (Red Hat package)
python3.12-pbr (Red Hat package)
python3.12-importlib-metadata (Red Hat package)
python3.12-multidict (Red Hat package)
python3.12-flake8 (Red Hat package)
python3.12-zope-interface (Red Hat package)
python3.12-whitenoise (Red Hat package)
python3.12-click (Red Hat package)
python3.12-wcmatch (Red Hat package)
python3.12-pytest (Red Hat package)
python3.12-more-itertools (Red Hat package)
python3.12-pillow (Red Hat package)
python3.12-pillow-debugsource (Red Hat package)
python3.12-azure-storage-blob (Red Hat package)
python3.12-rich (Red Hat package)
python3.12-websockets (Red Hat package)
python3.12-virtualenv (Red Hat package)
python3.12-hyperlink (Red Hat package)
python3.12-service-identity (Red Hat package)
python3.12-argon2-cffi-bindings (Red Hat package)
python3.12-attrs (Red Hat package)
python3.12-Automat (Red Hat package)
python3.12-gunicorn (Red Hat package)
python3.12-argon2-cffi (Red Hat package)
python3.12-txaio (Red Hat package)
python3.12-aiofiles (Red Hat package)
python3.12-packaging (Red Hat package)
python3.12-django-filter (Red Hat package)
python3.12-constantly (Red Hat package)
python3.12-pyOpenSSL (Red Hat package)
python3.12-autobahn (Red Hat package)
python3.12-black (Red Hat package)
python3.12-twisted (Red Hat package)
python3.12-incremental (Red Hat package)
ansible-creator (Red Hat package)
molecule (Red Hat package)
python3.12-pytest-ansible (Red Hat package)
python3.12-tox-ansible (Red Hat package)
python3.12-ansible-compat (Red Hat package)
ansible-dev-environment (Red Hat package)
python3.12-kubernetes (Red Hat package)
ansible-dev-tools (Red Hat package)
ansible-lint (Red Hat package)
ansible-navigator (Red Hat package)
python3.12-cryptography (Red Hat package)
python3.12-setuptools (Red Hat package)
python3.12-certifi (Red Hat package)
python3.12-jsonschema-specifications (Red Hat package)
python3.12-pytz (Red Hat package)
python3.12-uuid6 (Red Hat package)
python3.12-dispatcherd (Red Hat package)
python3.12-diff-match-patch (Red Hat package)

How to mitigate CVE-2026-24049

Install updates from vendor's website.

wheel - update to 0.46.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.3.2
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component - update to 5.3.1
watsonx Code Assistant On Prem - update to 5.3.1
Maximo Application Suite - Visual Inspection Component - update to 9.1.11
python3.12-rfc3339-validator (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
ansible-sign (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-ruamel-yaml-clib (Red Hat package) - addressed in versions 0.2.15-2.el8ap, 0.2.15-2.el9ap
python3.12-nh3 (Red Hat package) - addressed in versions 0.2.18-2.el8ap, 0.2.18-2.el9ap
python3.12-pyasn1-modules (Red Hat package) - addressed in versions 0.3.0-2.el8ap, 0.3.0-2.el9ap
python3.12-insights-analytics-collector (Red Hat package) - addressed in versions 0.3.2-3.el8ap, 0.3.2-3.el9ap
python3.12-jsonschema-path (Red Hat package) - addressed in versions 0.3.4-2.el8ap, 0.3.4-2.el9ap
python3.12-drools-jpy (Red Hat package) - addressed in versions 0.3.10-2.el8ap, 0.3.10-2.el9ap
python3.12-distlib (Red Hat package) - addressed in versions 0.4.0-2.el8ap, 0.4.0-2.el9ap
python3.12-propcache (Red Hat package) - addressed in versions 0.4.1-1.el8ap, 0.4.1-1.el9ap
python3.12-subprocess-tee (Red Hat package) - addressed in versions 0.4.2-2.el8ap, 0.4.2-2.el9ap
python3.12-pathable (Red Hat package) - addressed in versions 0.4.3-2.el8ap, 0.4.3-2.el9ap
python3.12-colorama (Red Hat package) - addressed in versions 0.4.6-2.el8ap, 0.4.6-2.el9ap
python3.12-json-stream-rs-tokenizer (Red Hat package) - addressed in versions 0.4.26-2.el8ap, 0.4.26-2.el9ap
python3.12-galaxy-importer (Red Hat package) - addressed in versions 0.4.37-3.el8ap, 0.4.37-3.el9ap
python3.12-pyasn1 (Red Hat package) - addressed in versions 0.5.1-2.el8ap, 0.5.1-2.el9ap
python3.12-inflection (Red Hat package) - addressed in versions 0.5.1-5.el8ap, 0.5.1-5.el9ap
python3.12-gnupg (Red Hat package) - addressed in versions 0.5.2-2.el8ap, 0.5.2-2.el9ap
python3.12-sqlparse (Red Hat package) - addressed in versions 0.5.3-3.el8ap, 0.5.3-3.el9ap
aap-metrics-utility (Red Hat package) - addressed in versions 0.6.0-2.1.el8ap, 0.6.0-2.1.el9ap
python3.12-isodate (Red Hat package) - addressed in versions 0.6.1-3.el8ap, 0.6.1-3.el9ap
python3.12-openapi-schema-validator (Red Hat package) - addressed in versions 0.6.2-2.el8ap, 0.6.2-2.el9ap
python3.12-ptyprocess (Red Hat package) - addressed in versions 0.7.0-2.el8ap, 0.7.0-2.el9ap
python3.12-mccabe (Red Hat package) - addressed in versions 0.7.0-3.el8ap, 0.7.0-3.el9ap
python3.12-openapi-spec-validator (Red Hat package) - addressed in versions 0.7.1-2.el8ap, 0.7.1-2.el9ap
python3.12-defusedxml (Red Hat package) - addressed in versions 0.7.1-5.el8ap, 0.7.1-5.el9ap
python3.12-django-crum (Red Hat package) - addressed in versions 0.7.9-3.el8ap, 0.7.9-3.el9ap
python3.12-pytest-plus (Red Hat package) - addressed in versions 0.8.1-2.el8ap, 0.8.1-2.el9ap
python3.12-tabulate (Red Hat package) - addressed in versions 0.9.0-4.el8ap, 0.9.0-4.el9ap
python3.12-commonmark (Red Hat package) - addressed in versions 0.9.1-7.el8ap, 0.9.1-7.el9ap
python3.12-click-help-colors (Red Hat package) - addressed in versions 0.9.4-2.el8ap, 0.9.4-2.el9ap
python3.12-s3transfer (Red Hat package) - addressed in versions 0.10.0-2.el8ap, 0.10.0-2.el9ap
python3.12-pathspec (Red Hat package) - addressed in versions 0.12.1-2.el8ap, 0.12.1-2.el9ap
python3.12-lockfile (Red Hat package) - addressed in versions 0.12.2-3.el8ap, 0.12.2-3.el9ap
python3.12-rq-scheduler (Red Hat package) - addressed in versions 0.14.0-1.el8ap, 0.14.0-1.el9ap
python3.12-jpy (Red Hat package) - addressed in versions 0.15.0-2.el8ap, 0.15.0-2.el9ap
python3.12-ecdsa (Red Hat package) - addressed in versions 0.18.0-2.el8ap, 0.18.0-2.el9ap
python3.12-rpds-py (Red Hat package) - addressed in versions 0.18.1-3.el8ap, 0.18.1-3.el9ap
python3.12-ruamel-yaml (Red Hat package) - addressed in versions 0.18.15-2.el8ap, 0.18.15-2.el9ap
python3.12-prometheus-client (Red Hat package) - addressed in versions 0.19.0-2.el8ap, 0.19.0-2.el9ap
python3.12-openapi-core (Red Hat package) - addressed in versions 0.19.1-2.el8ap, 0.19.1-2.el9ap
python3.12-pulp-glue (Red Hat package) - addressed in versions 0.23.2-2.el8ap, 0.23.2-2.el9ap
python3.12-pulp-ansible (Red Hat package) - addressed in versions 0.25.1-2.el8ap, 0.25.1-2.el9ap
python3.12-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-3.el8ap, 0.26.5-3.el9ap
python3.12-validators (Red Hat package) - addressed in versions 0.34.0-2.el8ap, 0.34.0-2.el9ap
python3.12-referencing (Red Hat package) - addressed in versions 0.36.2-3.el8ap, 0.36.2-3.el9ap
python-wheel - update to 0.40.0-2
python3-wheel - update to 0.40.0-2
python-wheel-wheel - update to 0.40.0-2
python311-wheel - addressed in versions 0.40.0-150400.13.10.1, 0.42.0-150600.3.3.1
python3.12-wheel (Red Hat package) - addressed in versions 0.41.2-3.el9_4.1, 0.41.2-3.el9_6.1, 0.41.2-4.el8_10
python-wheel (Red Hat package) - update to 0.41.2-5.el10_0.1
wheel (Ubuntu package) - update to 0.42.0-2ubuntu0.1~esm1
python313-wheel - update to 0.44.0-150700.3.3.1
python-wheel - addressed in versions 0.45.1-5.fc42, 0.45.1-20.fc43
mingw-python-wheel - update to 0.46.3-1.fc43
python3.12-drf-nested-routers (Red Hat package) - addressed in versions 0.93.5-2.el8ap, 0.93.5-2.el9ap
python3.12-mypy-extensions (Red Hat package) - addressed in versions 1.0.0-2.el8ap, 1.0.0-2.el9ap
python3.12-janus (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-ansible-sdk (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-resolvelib (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-ldap-filter (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-jmespath (Red Hat package) - addressed in versions 1.0.1-3.el8ap, 1.0.1-3.el9ap
python3.12-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-5.el8ap, 1.0.2-5.el9ap
python3.12-persisting-theory (Red Hat package) - addressed in versions 1.0-3.el8ap, 1.0-3.el9ap
python3.12-crontab (Red Hat package) - addressed in versions 1.0.5-1.el8ap, 1.0.5-1.el9ap
automation-controller-fapolicyd (Red Hat package) - addressed in versions 1.0-6.el8ap, 1.0-6.el9ap
python3.12-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.1.0-2.el8ap, 1.1.0-2.el9ap
python3.12-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-4.el8ap, 1.1.0-4.el9ap
python3.12-pytest-sugar (Red Hat package) - addressed in versions 1.1.1-2.el8ap, 1.1.1-2.el9ap
python3.12-django-lifecycle (Red Hat package) - addressed in versions 1.1.2-2.el8ap, 1.1.2-2.el9ap
ansible-rulebook (Red Hat package) - addressed in versions 1.1.7-2.el8ap, 1.1.7-2.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.1.16-1.el8ap, 1.1.16-1.el9ap
python3.12-brotli (Red Hat package) - addressed in versions 1.2.0-1.el8ap, 1.2.0-1.el9ap
python3.12-django-split-settings (Red Hat package) - addressed in versions 1.2.0-3.el8ap, 1.2.0-3.el9ap
python3.12-netaddr (Red Hat package) - addressed in versions 1.2.1-2.el8ap, 1.2.1-2.el9ap
python3.12-ansible-pylibssh (Red Hat package) - addressed in versions 1.2.2-2.el8ap, 1.2.2-2.el9ap
python3.12-enrich (Red Hat package) - addressed in versions 1.2.7-3.el8ap, 1.2.7-3.el9ap
python3.12-deprecated (Red Hat package) - addressed in versions 1.2.14-2.el8ap, 1.2.14-2.el9ap
python3.12-onigurumacffi (Red Hat package) - addressed in versions 1.3.0-2.el8ap, 1.3.0-2.el9ap
python3.12-xlwt (Red Hat package) - addressed in versions 1.3.0-5.el8ap, 1.3.0-5.el9ap
python3.12-requests-oauthlib (Red Hat package) - addressed in versions 1.3.1-2.el8ap, 1.3.1-2.el9ap
python3.12-parsley (Red Hat package) - addressed in versions 1.3-4.el8ap, 1.3-4.el9ap
python3.12-xmlsec (Red Hat package) - addressed in versions 1.3.13-3.el8ap, 1.3.13-3.el9ap
python3.12-aiosignal (Red Hat package) - addressed in versions 1.4.0-1.el8ap, 1.4.0-1.el9ap
python3.12-frozenlist (Red Hat package) - addressed in versions 1.4.0-2.el8ap, 1.4.0-2.el9ap
python3.12-odfpy (Red Hat package) - addressed in versions 1.4.1-9.el8ap, 1.4.1-9.el9ap
python3.12-url-normalize (Red Hat package) - addressed in versions 1.4.3-6.el8ap, 1.4.3-6.el9ap
python3.12-drf-access-policy (Red Hat package) - addressed in versions 1.5.0-2.el8ap, 1.5.0-2.el9ap
python3.12-freezegun (Red Hat package) - addressed in versions 1.5.5-1.el8ap, 1.5.5-1.el9ap
python3.12-jwcrypto (Red Hat package) - addressed in versions 1.5.6-2.el8ap, 1.5.6-2.el9ap
python3.12-pluggy (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-jq (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pyproject-api (Red Hat package) - addressed in versions 1.6.1-2.el8ap, 1.6.1-2.el9ap
receptor (Red Hat package) - addressed in versions 1.6.3-4.el8ap, 1.6.3-4.el9ap
python3.12-uamqp (Red Hat package) - addressed in versions 1.6.8-2.el8ap, 1.6.8-2.el9ap
python3.12-websocket-client (Red Hat package) - addressed in versions 1.7.0-3.el8ap, 1.7.0-3.el9ap
python3.12-distro (Red Hat package) - addressed in versions 1.9.0-2.el8ap, 1.9.0-2.el9ap
python3.12-lazy-object-proxy (Red Hat package) - addressed in versions 1.10.0-2.el8ap, 1.10.0-2.el9ap
python3.12-pydantic (Red Hat package) - addressed in versions 1.10.15-2.el8ap, 1.10.15-2.el9ap
python3.12-django-storages (Red Hat package) - update to 1.14.2-3.el8ap
python3.12-markuppy (Red Hat package) - addressed in versions 1.14-5.el8ap, 1.14-5.el9ap
python3.12-django-dynamic-preferences (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-wrapt (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-python3-saml (Red Hat package) - addressed in versions 1.16.0-3.el8ap, 1.16.0-3.el9ap
python3.12-six (Red Hat package) - addressed in versions 1.17.0-1.el8ap, 1.17.0-1.el9ap
python3.12-yarl (Red Hat package) - addressed in versions 1.18.3-1.el8ap, 1.18.3-1.el9ap
python3.12-parse (Red Hat package) - addressed in versions 1.20.1-2.el8ap, 1.20.1-2.el9ap
python3.12-opentelemetry-contrib (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-opentelemetry (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-azure-core (Red Hat package) - addressed in versions 1.34.0-2.el8ap, 1.34.0-2.el9ap
python3.12-boto3 (Red Hat package) - addressed in versions 1.34.30-2.el8ap, 1.34.30-2.el9ap
python3.12-botocore (Red Hat package) - addressed in versions 1.34.162-2.el8ap, 1.34.162-2.el9ap
yamllint (Red Hat package) - addressed in versions 1.35.1-2.el8ap, 1.35.1-2.el9ap
python3.12-xds-protos (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-grpcio (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-googleapis-common-protos (Red Hat package) - addressed in versions 1.72.0-1.el8ap, 1.72.0-1.el9ap
python3.12-iniconfig (Red Hat package) - addressed in versions 2.0.0-2.el8ap, 2.0.0-2.el9ap
python3.12-croniter (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-xlrd (Red Hat package) - addressed in versions 2.0.1-7.el8ap, 2.0.1-7.el9ap
python3.12-async-lru (Red Hat package) - addressed in versions 2.0.5-1.el8ap, 2.0.5-1.el9ap
uwsgi (Red Hat package) - addressed in versions 2.0.28-2.el8ap, 2.0.28-2.el9ap
python3.12-execnet (Red Hat package) - addressed in versions 2.1.2-2.el8ap, 2.1.2-2.el9ap
python3.12-markupsafe (Red Hat package) - addressed in versions 2.1.5-2.el8ap, 2.1.5-2.el9ap
python3.12-dpath (Red Hat package) - addressed in versions 2.1.6-2.el8ap, 2.1.6-2.el9ap
python3.12-backoff (Red Hat package) - addressed in versions 2.2.1-2.el8ap, 2.2.1-2.el9ap
python3.12-django-oauth-toolkit (Red Hat package) - addressed in versions 2.3.0-2.el8ap, 2.3.0-2.el9ap
python3.12-django-prometheus (Red Hat package) - addressed in versions 2.3.1-3.el8ap, 2.3.1-3.el9ap
python3.12-json-stream (Red Hat package) - addressed in versions 2.3.2-2.el8ap, 2.3.2-2.el9ap
python3.12-bracex (Red Hat package) - addressed in versions 2.4-2.el8ap, 2.4-2.el9ap
ansible-runner (Red Hat package) - addressed in versions 2.4.2-3.el8ap, 2.4.2-3.el9ap
python3.12-pyrad (Red Hat package) - addressed in versions 2.4-3.el8ap, 2.4-3.el9ap
Ansible Automation Platform - addressed in versions 2.5, 2.6
python3.12-pygtrie (Red Hat package) - addressed in versions 2.5.0-3.el8ap, 2.5.0-3.el9ap
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.5-21.el8ap, 2.5-21.el9ap
python3.12-django-ansible-base (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
python3.12-aiohappyeyeballs (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-rq (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-tacacs-plus (Red Hat package) - addressed in versions 2.6-3.el8ap, 2.6-3.el9ap
python3.12-urllib3 (Red Hat package) - addressed in versions 2.6.3-2.el8ap, 2.6.3-2.el9ap
python3.12-pyjwt (Red Hat package) - addressed in versions 2.7.0-3.el8ap, 2.7.0-3.el9ap
python3.12-dateutil (Red Hat package) - addressed in versions 2.8.2-3.el8ap, 2.8.2-3.el9ap
python3.12-semantic-version (Red Hat package) - addressed in versions 2.10.0-3.el8ap, 2.10.0-3.el9ap
python3.12-pycodestyle (Red Hat package) - addressed in versions 2.11.1-2.el8ap, 2.11.1-2.el9ap
bindep (Red Hat package) - addressed in versions 2.13.0-2.el8ap, 2.13.0-2.el9ap
ansible-core (Red Hat package) - addressed in versions 2.16.16-1.el8ap, 2.16.16-1.el9ap
python3.12-pygments (Red Hat package) - addressed in versions 2.17.2-3.el8ap, 2.17.2-3.el9ap
python3.12-pulp-container (Red Hat package) - addressed in versions 2.19.3-2.el8ap, 2.19.3-2.el9ap
python3.12-google-auth (Red Hat package) - addressed in versions 2.27.0-2.el8ap, 2.27.0-2.el9ap
python3.12-requests (Red Hat package) - addressed in versions 2.31.0-4.el8ap, 2.31.0-4.el9ap
python3.12-werkzeug (Red Hat package) - addressed in versions 3.0.3-2.el8ap, 3.0.3-2.el9ap
python3.12-django-ipware (Red Hat package) - addressed in versions 3.0.7-4.el8ap, 3.0.7-4.el9ap
python3.12-pyflakes (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
python3.12-termcolor (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
ansible-builder (Red Hat package) - addressed in versions 3.1.1-1.2.el8ap, 3.1.1-1.2.el9ap
python3.12-pyparsing (Red Hat package) - addressed in versions 3.1.1-2.el8ap, 3.1.1-2.el9ap
python3.12-django-picklefield (Red Hat package) - addressed in versions 3.1-2.el8ap, 3.1-2.el9ap
python3.12-openpyxl (Red Hat package) - addressed in versions 3.1.2-2.el8ap, 3.1.2-2.el9ap
python3.12-daemon (Red Hat package) - addressed in versions 3.1.2-3.el8ap, 3.1.2-3.el9ap
python3.12-jinja2 (Red Hat package) - addressed in versions 3.1.6-2.el8ap, 3.1.6-2.el9ap
python3.12-gitpython (Red Hat package) - addressed in versions 3.1.41-2.el8ap, 3.1.41-2.el9ap
python3.12-aiodns (Red Hat package) - addressed in versions 3.2.0-2.el8ap, 3.2.0-2.el9ap
python3.12-python3-openid (Red Hat package) - addressed in versions 3.2.0-4.el8ap, 3.2.0-4.el9ap
python3.12-django-rq (Red Hat package) - addressed in versions 3.2.2-1.el8ap, 3.2.2-1.el9ap
python3.12-oauthlib (Red Hat package) - addressed in versions 3.2.2-2.el8ap, 3.2.2-2.el9ap
python3.12-psycopg (Red Hat package) - addressed in versions 3.2.7-2.el8ap, 3.2.7-2.el9ap
python3.12-dynaconf (Red Hat package) - addressed in versions 3.2.11-2.el8ap, 3.2.11-2.el9ap
python3.12-django-import-export (Red Hat package) - addressed in versions 3.3.6-3.el8ap, 3.3.6-3.el9ap
python3.12-django-guid (Red Hat package) - addressed in versions 3.4.0-2.el8ap, 3.4.0-2.el9ap
python3.12-xxhash (Red Hat package) - addressed in versions 3.4.1-2.el8ap, 3.4.1-2.el9ap
python3.12-ldap (Red Hat package) - addressed in versions 3.4.5-1.el8ap, 3.4.5-1.el9ap
python3.12-tablib (Red Hat package) - addressed in versions 3.5.0-2.el8ap, 3.5.0-2.el9ap
python3.12-markdown (Red Hat package) - addressed in versions 3.5.2-2.el8ap, 3.5.2-2.el9ap
python3.12-asgiref (Red Hat package) - addressed in versions 3.7.2-2.el8ap, 3.7.2-2.el9ap
python3.12-pytest-xdist (Red Hat package) - addressed in versions 3.8.0-2.el8ap, 3.8.0-2.el9ap
python3.12-filelock (Red Hat package) - addressed in versions 3.13.1-2.el8ap, 3.13.1-2.el9ap
python3.12-aiohttp (Red Hat package) - addressed in versions 3.13.3-2.el8ap, 3.13.3-2.el9ap
python3.12-djangorestframework (Red Hat package) - addressed in versions 3.15.1-2.el8ap, 3.15.1-2.el9ap
python3.12-zipp (Red Hat package) - addressed in versions 3.19.2-2.el8ap, 3.19.2-2.el9ap
python3.12-marshmallow (Red Hat package) - addressed in versions 3.26.2-1.el8ap, 3.26.2-1.el9ap
python3.12-pulpcore (Red Hat package) - addressed in versions 3.49.50-1.el8ap, 3.49.50-1.el9ap
python3.12-django-auth-ldap (Red Hat package) - addressed in versions 4.0.0-3.el8ap, 4.0.0-3.el9ap
python3.12-channels (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-daphne (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-gitdb (Red Hat package) - addressed in versions 4.0.11-2.el8ap, 4.0.11-2.el9ap
python3.12-uritemplate (Red Hat package) - addressed in versions 4.1.1-4.el8ap, 4.1.1-4.el9ap
python3.12-django-extensions (Red Hat package) - addressed in versions 4.1-2.el8ap, 4.1-2.el9ap
python3.12-platformdirs (Red Hat package) - addressed in versions 4.2.0-2.el8ap, 4.2.0-2.el9ap
supervisor (Red Hat package) - addressed in versions 4.2.5-2.el8ap, 4.2.5-2.el9ap
python3.12-django (Red Hat package) - addressed in versions 4.2.28-1.el8ap, 4.2.28-1.el9ap
python3.12-pycares (Red Hat package) - addressed in versions 4.4.0-3.el8ap, 4.4.0-3.el9ap
python3.12-social-auth-core (Red Hat package) - addressed in versions 4.5.4-2.el8ap, 4.5.4-2.el9ap
python3.12-redis (Red Hat package) - addressed in versions 4.6.0-3.el8ap, 4.6.0-3.el9ap
automation-controller (Red Hat package) - addressed in versions 4.6.26-1.el8ap, 4.6.26-1.el9ap
python3.12-pexpect (Red Hat package) - addressed in versions 4.9.0-2.el8ap, 4.9.0-2.el9ap
python3.12-rsa (Red Hat package) - addressed in versions 4.9-3.el8ap, 4.9-3.el9ap
python3.12-galaxy-ng (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
automation-hub (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
python3.12-typing-extensions (Red Hat package) - addressed in versions 4.15.0-2.el8ap, 4.15.0-2.el9ap
python3.12-tox (Red Hat package) - addressed in versions 4.15.1-2.el8ap, 4.15.1-2.el9ap
python3.12-jsonschema (Red Hat package) - addressed in versions 4.21.1-2.el8ap, 4.21.1-2.el9ap
python3.12-smmap (Red Hat package) - addressed in versions 5.0.1-2.el8ap, 5.0.1-2.el9ap
python3.12-watchdog (Red Hat package) - addressed in versions 5.0.2-2.el8ap, 5.0.2-2.el9ap
python3.12-django-flags (Red Hat package) - addressed in versions 5.0.13-2.el8ap, 5.0.13-2.el9ap
python3.12-chardet (Red Hat package) - addressed in versions 5.2.0-3.el8ap, 5.2.0-3.el9ap
python3.12-lxml (Red Hat package) - addressed in versions 5.3.0-2.el8ap, 5.3.0-2.el9ap
python3.12-cachetools (Red Hat package) - addressed in versions 5.3.2-2.el8ap, 5.3.2-2.el9ap
python3.12-podman (Red Hat package) - addressed in versions 5.4.0.1-2.el8ap, 5.4.0.1-2.el9ap
python3.12-django-redis (Red Hat package) - addressed in versions 5.4.0-2.el8ap, 5.4.0-2.el9ap
python3.12-social-auth-app-django (Red Hat package) - addressed in versions 5.4.1-2.el8ap, 5.4.1-2.el9ap
SOAR QRadar Plugin App - update to 5.6.4
python3.12-protobuf (Red Hat package) - addressed in versions 5.29.6-1.el8ap, 5.29.6-1.el9ap
python3.12-pbr (Red Hat package) - addressed in versions 6.0.0-3.el8ap, 6.0.0-3.el9ap
python3.12-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-3.el8ap, 6.0.1-3.el9ap
python3.12-multidict (Red Hat package) - addressed in versions 6.0.4-2.el8ap, 6.0.4-2.el9ap
python3.12-flake8 (Red Hat package) - addressed in versions 6.1.0-3.el8ap, 6.1.0-3.el9ap
python3.12-zope-interface (Red Hat package) - addressed in versions 6.1-2.el8ap, 6.1-2.el9ap
python3.12-whitenoise (Red Hat package) - addressed in versions 6.6.0-2.el8ap, 6.6.0-2.el9ap
python3.12-click (Red Hat package) - addressed in versions 8.1.7-2.el8ap, 8.1.7-2.el9ap
python3.12-wcmatch (Red Hat package) - addressed in versions 8.5-2.el8ap, 8.5-2.el9ap
python3.12-pytest (Red Hat package) - addressed in versions 9.0.1-2.el8ap, 9.0.1-2.el9ap
python3.12-more-itertools (Red Hat package) - addressed in versions 10.2.0-2.el8ap, 10.2.0-2.el9ap
python3.12-pillow (Red Hat package) - addressed in versions 10.3.0-2.el8ap, 10.3.0-2.el9ap
python3.12-pillow-debugsource (Red Hat package) - update to 10.3.0-2.el9ap
python3.12-azure-storage-blob (Red Hat package) - update to 12.19.0-2.el8ap
python3.12-rich (Red Hat package) - addressed in versions 13.1.0-2.el8ap, 13.1.0-2.el9ap
python3.12-websockets (Red Hat package) - addressed in versions 15.0-3.el8ap, 15.0-3.el9ap
python3.12-virtualenv (Red Hat package) - addressed in versions 20.25.1-2.el8ap, 20.25.1-2.el9ap
python3.12-hyperlink (Red Hat package) - addressed in versions 21.0.0-3.el8ap, 21.0.0-3.el9ap
python3.12-service-identity (Red Hat package) - addressed in versions 21.1.0-3.el8ap, 21.1.0-3.el9ap
python3.12-argon2-cffi-bindings (Red Hat package) - addressed in versions 21.2.0-2.el8ap, 21.2.0-2.el9ap
python3.12-attrs (Red Hat package) - addressed in versions 22.2.0-2.el8ap, 22.2.0-2.el9ap
python3.12-Automat (Red Hat package) - addressed in versions 22.10.0-4.el8ap, 22.10.0-4.el9ap
python3.12-gunicorn (Red Hat package) - addressed in versions 23.0.0-2.el8ap, 23.0.0-2.el9ap
python3.12-argon2-cffi (Red Hat package) - addressed in versions 23.1.0-2.el8ap, 23.1.0-2.el9ap
python3.12-txaio (Red Hat package) - addressed in versions 23.1.1-3.el8ap, 23.1.1-3.el9ap
python3.12-aiofiles (Red Hat package) - addressed in versions 23.2.1-2.el8ap, 23.2.1-2.el9ap
python3.12-packaging (Red Hat package) - addressed in versions 23.2-2.el8, 23.2-2.el9
python3.12-django-filter (Red Hat package) - addressed in versions 23.5-2.el8ap, 23.5-2.el9ap
python3.12-constantly (Red Hat package) - addressed in versions 23.10.4-1.el8ap, 23.10.4-1.el9ap
python3.12-pyOpenSSL (Red Hat package) - addressed in versions 24.1.0-2.el8ap, 24.1.0-2.el9ap
python3.12-autobahn (Red Hat package) - addressed in versions 24.4.2-2.el8ap, 24.4.2-2.el9ap
python3.12-black (Red Hat package) - addressed in versions 24.4.2-3.el8ap, 24.4.2-3.el9ap
python3.12-twisted (Red Hat package) - addressed in versions 24.7.0-2.el8ap, 24.7.0-2.el9ap
python3.12-incremental (Red Hat package) - addressed in versions 24.7.2-2.el8ap, 24.7.2-2.el9ap
ansible-creator (Red Hat package) - addressed in versions 25.12.0-1.1.el8ap, 25.12.0-1.1.el9ap
molecule (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-pytest-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-tox-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-ansible-compat (Red Hat package) - addressed in versions 25.12.0-3.el8ap, 25.12.0-3.el9ap
ansible-dev-environment (Red Hat package) - addressed in versions 25.12.2-1.2.el8ap, 25.12.2-1.2.el9ap
python3.12-kubernetes (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-dev-tools (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-lint (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-navigator (Red Hat package) - addressed in versions 26.1.1-1.1.el8ap, 26.1.1-1.1.el9ap
python3.12-cryptography (Red Hat package) - addressed in versions 42.0.5-2.el8ap, 42.0.5-2.el9ap
python3.12-setuptools (Red Hat package) - update to 68.2.2-5.el9_6
python3.12-certifi (Red Hat package) - addressed in versions 2023.5.7-2.el8ap, 2023.5.7-2.el9ap
python3.12-jsonschema-specifications (Red Hat package) - addressed in versions 2023.12.1-2.el8ap, 2023.12.1-2.el9ap
python3.12-pytz (Red Hat package) - addressed in versions 2024.1-2.el8ap, 2024.1-2.el9ap
python3.12-uuid6 (Red Hat package) - addressed in versions 2024.1.12-2.el8ap, 2024.1.12-2.el9ap
python3.12-dispatcherd (Red Hat package) - addressed in versions 2025.5.19-3.el8ap, 2025.5.19-3.el9ap
python3.12-diff-match-patch (Red Hat package) - addressed in versions 20230430-2.el8ap, 20230430-2.el9ap

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins