Copyright © 2012 Red Hat, Inc. All rights reserved.
Moderate
2026-06-23T22:02:45
python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-835
When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.
A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives.
A flaw was found in the Python tarfile module. When processing a tar archive in streaming mode (mode='r|'), the _Stream.seek function does not properly check for end-of-file, which can cause an infinite loop when processing a specially crafted archive. Red Hat ships Python as part of many products, and applications using tarfile's streaming mode are potentially affected by this denial of service vulnerability.
Avoid using tarfile streaming mode (mode='r|') with untrusted tar archives. Use the standard file-based mode (mode='r') instead where possible.
Red Hat Hardened Images
2026-07-05T00:00:00Z
RHSA-2026:35806
python3-14-main-3.14.6-1.2.hum1
Red Hat Hardened Images
2026-07-05T00:00:00Z
RHSA-2026:35807
python3-11-main-3.11.15-4.4.hum1
Red Hat Hardened Images
2026-07-05T00:00:00Z
RHSA-2026:35812
python3-13-main-3.13.14-1.2.hum1
Red Hat Hardened Images
2026-07-05T00:00:00Z
RHSA-2026:35813
python3-12-main-3.12.13-3.3.hum1
Exploit Intelligence
Fix deferred
exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/model-opt-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/model-opt-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-cpu-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-neuron-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-rocm-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-spyre-rhel9
Red Hat AI Inference Server
Fix deferred
rhaiis/vllm-tpu-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-cpu-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-cuda-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-gaudi-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-neuron-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-rocm-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-spyre-rhel9
Red Hat AI Inference Server
Fix deferred
rhaii/vllm-tpu-rhel9
Red Hat Enterprise Linux 10
Fix deferred
python3.12
Red Hat Enterprise Linux 10
Fix deferred
python3.14
Red Hat Enterprise Linux 6
Fix deferred
python
Red Hat Enterprise Linux 7
Fix deferred
python
Red Hat Enterprise Linux 7
Fix deferred
python3
Red Hat Enterprise Linux 8
Fix deferred
python3
Red Hat Enterprise Linux 8
Fix deferred
python3.12
Red Hat Enterprise Linux 8
Fix deferred
python36:3.6/python36
Red Hat Enterprise Linux 9
Fix deferred
python3.12
Red Hat Enterprise Linux 9
Fix deferred
python3.14
Red Hat Enterprise Linux 9
Fix deferred
python3.9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-aws-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-azure-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-azure-rocm-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-gaudi-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-gcp-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Fix deferred
rhelai3/bootc-rocm-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-cpu-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-cuda-12.9-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-cuda-13.0-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-gaudi-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-neuron-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-rocm-6.4-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-rocm-7.0-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-rocm-7.1-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-spyre-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhai/base-image-tpu-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-automl-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-autorag-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-caikit-nlp-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-caikit-tgis-serving-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-feature-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-kserve-autogluon-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-kserve-storage-initializer-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llama-stack-core-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llm-d-inference-scheduler-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-llm-d-kv-cache-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-mlflow-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-ml-pipelines-runtime-generic-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-mlserver-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-modelmesh-runtime-adapter-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-model-registry-job-async-upload-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-openvino-model-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-pipelines-components-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-spark-operator-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-ta-lmes-job-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cpu-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cpu-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-cuda121-torch24-py311-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-cuda124-torch25-py311-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-cuda128-torch28-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-cuda128-torch29-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-rocm62-torch24-py311-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-rocm62-torch25-py311-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-rocm64-torch28-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-training-rocm64-torch29-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-trustyai-nemo-guardrails-server-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-vllm-gaudi-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Fix deferred
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Red Hat OpenShift Dev Spaces
Fix deferred
devspaces/code-rhel9
Red Hat OpenShift Virtualization 4
Fix deferred
container-native-virtualization/ocp-virt-validation-checkup-rhel9
Self-service automation portal 2
Fix deferred
ansible-automation-platform/bootc-automation-portal-rhel9
https://www.cve.org/CVERecord?id=CVE-2026-11972
https://nvd.nist.gov/vuln/detail/CVE-2026-11972
https://github.com/python/cpython/issues/151981
https://github.com/python/cpython/pull/151982
https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/