ELSA-2026-89742

ELSA-2026-89742 - python3.9 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-26

Description

[3.9.25-7.0.1.el9_8.6]
- Remove upstream URL reference

[3.9.25-7.6]
- CVE-2026-19553 python3.9: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
Resolves: RHEL-274143

[3.9.25-7.5]
- CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext when sni_callback switches contexts
Resolves: RHEL-276263

[3.9.25-7.4]
- CVE-2026-12345 python3.9: python: Arbitrary file deletion via race condition during temporary directory cleanup
Resolves: RHEL-272937

[3.9.25-7.3]
- Security fix for CVE-2026-11940
Resolves: RHEL-227228

[3.9.25-7.2]
- Security fix for CVE-2026-15308
Resolves: RHEL-193786

[3.9.25-7.1]
- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207

Related CVEs

CVE-2026-12345

CVE-2026-19445

CVE-2026-19553

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_aarch64_appstream
	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_aarch64_baseos_latest
	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_aarch64_codeready_builder
	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_aarch64_u8_baseos_patch
	python-unversioned-command-3.9.25-7.0.1.el9_8.6.noarch.rpm	b8e13d52613b81fed48f6756532fa9935d1181b9115d6be4f0c7cc15921b3cea	-	ol9_aarch64_appstream
	python3-3.9.25-7.0.1.el9_8.6.aarch64.rpm	4c6a0aa2ceaf27698255e9d479d044f30f4073269c786655d9b4c00287525a2a	-	ol9_aarch64_baseos_latest
	python3-3.9.25-7.0.1.el9_8.6.aarch64.rpm	4c6a0aa2ceaf27698255e9d479d044f30f4073269c786655d9b4c00287525a2a	-	ol9_aarch64_u8_baseos_patch
	python3-debug-3.9.25-7.0.1.el9_8.6.aarch64.rpm	df58c6d91207aae271df83b94a0caaea9f608b4696f8106b16395b2527b462fc	-	ol9_aarch64_codeready_builder
	python3-devel-3.9.25-7.0.1.el9_8.6.aarch64.rpm	25000e68c81d293d8f6aa225815a070d7a41b80fdf029118f51b9ea94a6ed2c3	-	ol9_aarch64_appstream
	python3-idle-3.9.25-7.0.1.el9_8.6.aarch64.rpm	adecc46955a4ca22e049474e8788a29da8819f1826acb9a35ad290115d3bd8b4	-	ol9_aarch64_codeready_builder
	python3-libs-3.9.25-7.0.1.el9_8.6.aarch64.rpm	4e056c69280d700211e877aa49554dea991c2bf4d9dadd1f3979b31f95058a1f	-	ol9_aarch64_baseos_latest
	python3-libs-3.9.25-7.0.1.el9_8.6.aarch64.rpm	4e056c69280d700211e877aa49554dea991c2bf4d9dadd1f3979b31f95058a1f	-	ol9_aarch64_u8_baseos_patch
	python3-test-3.9.25-7.0.1.el9_8.6.aarch64.rpm	759a631e9aad2564f11b2d416ca9eb1814b5667f012dc2d1ba8afa724ce51c04	-	ol9_aarch64_codeready_builder
	python3-tkinter-3.9.25-7.0.1.el9_8.6.aarch64.rpm	d7213bad8dc0b6264e75b1f2088c64feb055ce8b6c13a8ae1236a8e87830287d	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_x86_64_appstream
	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_x86_64_baseos_latest
	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_x86_64_codeready_builder
	python3.9-3.9.25-7.0.1.el9_8.6.src.rpm	f795b6d330b9fa3b5116751871d15c3cfe3cc6e9d70e09276cdcf73e9f04d60c	-	ol9_x86_64_u8_baseos_patch
	python-unversioned-command-3.9.25-7.0.1.el9_8.6.noarch.rpm	b8e13d52613b81fed48f6756532fa9935d1181b9115d6be4f0c7cc15921b3cea	-	ol9_x86_64_appstream
	python3-3.9.25-7.0.1.el9_8.6.i686.rpm	3b60135c975dff9cc4671a6d49e5517b92a12ebd3342d173114bb80ef6a07720	-	ol9_x86_64_codeready_builder
	python3-3.9.25-7.0.1.el9_8.6.x86_64.rpm	c768044fd55f5e93dc0b7b28d9097df384feb3519233577cdd149a9f8353ebb2	-	ol9_x86_64_baseos_latest
	python3-3.9.25-7.0.1.el9_8.6.x86_64.rpm	c768044fd55f5e93dc0b7b28d9097df384feb3519233577cdd149a9f8353ebb2	-	ol9_x86_64_u8_baseos_patch
	python3-debug-3.9.25-7.0.1.el9_8.6.i686.rpm	b07f350a62fb5b45ecef8eca96f5e8ab72686e8b05ae3ef07a0b04880b29f1cb	-	ol9_x86_64_codeready_builder
	python3-debug-3.9.25-7.0.1.el9_8.6.x86_64.rpm	bd4d9b70a477de76db466a5b4509f352ad0748523cfe2c21f50b460410042822	-	ol9_x86_64_codeready_builder
	python3-devel-3.9.25-7.0.1.el9_8.6.i686.rpm	86ed8ae7aa01490226bc5393160b76e2b3d377640cabde6b6d9fd0f91d29461e	-	ol9_x86_64_appstream
	python3-devel-3.9.25-7.0.1.el9_8.6.x86_64.rpm	2a75052908c846fde5c7b6468cc3fe29bec601da9c1cdc9a96919d219b36d837	-	ol9_x86_64_appstream
	python3-idle-3.9.25-7.0.1.el9_8.6.i686.rpm	05b8a17f074868f0b18fdb3a3e18d9ffe0784a60984d085844ac5468b690f0da	-	ol9_x86_64_codeready_builder
	python3-idle-3.9.25-7.0.1.el9_8.6.x86_64.rpm	82897e1ff43725f6ac37aa29fb04f7167b77e3707803458fe9c5ba504a8b7249	-	ol9_x86_64_codeready_builder
	python3-libs-3.9.25-7.0.1.el9_8.6.i686.rpm	239508e59e520b85632834b89e3e1a07305533e7add75ca5f3a2666dae4bfc65	-	ol9_x86_64_baseos_latest
	python3-libs-3.9.25-7.0.1.el9_8.6.i686.rpm	239508e59e520b85632834b89e3e1a07305533e7add75ca5f3a2666dae4bfc65	-	ol9_x86_64_u8_baseos_patch
	python3-libs-3.9.25-7.0.1.el9_8.6.x86_64.rpm	607573b4e15a6a06e5753cd4a14be24888a2f9a837990f0396dd59bc08be103a	-	ol9_x86_64_baseos_latest
	python3-libs-3.9.25-7.0.1.el9_8.6.x86_64.rpm	607573b4e15a6a06e5753cd4a14be24888a2f9a837990f0396dd59bc08be103a	-	ol9_x86_64_u8_baseos_patch
	python3-test-3.9.25-7.0.1.el9_8.6.i686.rpm	cb72f7bad8f6a218046c16df15f51552c9e99c3a803fb4ea10aa8e5ca71a3e1a	-	ol9_x86_64_codeready_builder
	python3-test-3.9.25-7.0.1.el9_8.6.x86_64.rpm	acc563208a29d7e5fdc8b14f1844418fefc23e2cd18cf6d449a5d727542bcf49	-	ol9_x86_64_codeready_builder
	python3-tkinter-3.9.25-7.0.1.el9_8.6.i686.rpm	1f44ed1fe620940e9637bfd7c203645e8966dfb79f8e95ba65e391e65fbc901b	-	ol9_x86_64_codeready_builder
	python3-tkinter-3.9.25-7.0.1.el9_8.6.x86_64.rpm	7890dac6e5c6316d13f36b10a9083872e530043494ab39cbedbea57aa39c1009	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team