ELSA-2026-35838

ELSA-2026-35838 - python3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-21

Description

[3.6.8-21.0.13]
- Security update CVE-2026-4786 [Orabug: 39695277]

[3.6.8-21.0.11]
- Security update CVE-2026-4519 [Orabug: 39246828]

[3.6.8-21.0.9]
- Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 [Orabug: 39159999]

[3.6.8-21.0.7]
- Security update CVE-2025-12084 [Orabug: 38971895]

[3.6.8-21.0.5]
- tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194]

[3.6.8-21.0.3]
- Fix DoS parsing crafted tarfile headers [Orabug: 37626372][CVE-2024-6232]
- Disable test_socket in the PGO profile task.

Related CVEs

CVE-2026-4786

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	python3-3.6.8-21.0.13.el7_9.src.rpm	e6ab04809f5941239adff2df3d6aae7c0bcd9c2979de529dee3d9e5f19affab7	-	ol7_x86_64_latest_ELS
	python3-3.6.8-21.0.13.el7_9.i686.rpm	94ed61290f0a84315caa56ea69d5a0b13d34d57619125b4b88b5fc29d5c73137	-	ol7_x86_64_latest_ELS
	python3-3.6.8-21.0.13.el7_9.x86_64.rpm	1a2563100fbe10c00962d7bd844fdd65e7b96025871e318941f2779f6b4a0cfb	-	ol7_x86_64_latest_ELS
	python3-debug-3.6.8-21.0.13.el7_9.i686.rpm	d41cce9f3fa4d1646d35013e3e85048735dd376830cc8b28e915ef67617cd382	-	ol7_x86_64_latest_ELS
	python3-debug-3.6.8-21.0.13.el7_9.x86_64.rpm	6e4e818f3cbc3c3e8d4481c5fde52aab4c39e04c73eb9e28c209628a7fe93634	-	ol7_x86_64_latest_ELS
	python3-devel-3.6.8-21.0.13.el7_9.i686.rpm	6f8ce33f9bc5480bfca55f8380514e3a9ee6ec70573ba9ff358fad9b7a832c24	-	ol7_x86_64_latest_ELS
	python3-devel-3.6.8-21.0.13.el7_9.x86_64.rpm	ff133fd4fd99448a7ad0ae6db420e4515b0d63b7a30e72fc7e48be7d3b4104ea	-	ol7_x86_64_latest_ELS
	python3-idle-3.6.8-21.0.13.el7_9.i686.rpm	0e0409a027f7e8231234ebe80e15b67ad89c11af67eb1133aa386ae62cc3e720	-	ol7_x86_64_latest_ELS
	python3-idle-3.6.8-21.0.13.el7_9.x86_64.rpm	9beb5ab5c5f7875dc485e5c041bccd60b035ef61ef9903eca2d13e0b4e96b89a	-	ol7_x86_64_latest_ELS
	python3-libs-3.6.8-21.0.13.el7_9.i686.rpm	de80472b38e3771254890d5d3be869d1342c30f22785bcf1c536205968d88f45	-	ol7_x86_64_latest_ELS
	python3-libs-3.6.8-21.0.13.el7_9.x86_64.rpm	4a6d8e80ff2b47105cf943e62af6d63fea435d2e8198c04a1f93937930ab83fc	-	ol7_x86_64_latest_ELS
	python3-test-3.6.8-21.0.13.el7_9.i686.rpm	8b2787a111d3aeb20fc7ef2d539a5a59fa5b8b50e293a44283741292f8581a21	-	ol7_x86_64_latest_ELS
	python3-test-3.6.8-21.0.13.el7_9.x86_64.rpm	da34f44dc09a8895f4add2923d04347b3bacbd2ad81def6a277a9ba89dc7d2c2	-	ol7_x86_64_latest_ELS
	python3-tkinter-3.6.8-21.0.13.el7_9.i686.rpm	88da8b8ac5509a65a765e7474924fdde2a8874b8d7ed9936b4f121745c3ca2be	-	ol7_x86_64_latest_ELS
	python3-tkinter-3.6.8-21.0.13.el7_9.x86_64.rpm	4d7e347087f3640e9843a3d1bad3ae344b77dc8708d703e0bbbc312bfcfb540b	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team