ELSA-2026-2713

ELSA-2026-2713 - python3 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-03-09

Description

[3.6.8-21.0.7]
- Security update CVE-2025-12084 [Orabug: 38971895]

[3.6.8-21.0.5]
- tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194]

[3.6.8-21.0.3]
- Fix DoS parsing crafted tarfile headers [Orabug: 37626372][CVE-2024-6232]
- Disable test_socket in the PGO profile task.

Related CVEs

CVE-2025-12084

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	python3-3.6.8-21.0.7.el7_9.src.rpm	849e631c0becfc3c302b964f14a837ad491dd6a1401e9b50c742d3ed6a759ae6	-	ol7_x86_64_latest_ELS
	python3-3.6.8-21.0.7.el7_9.i686.rpm	9f876362e9b74f063416cba2d3fab4334aeb767f627166252dd5c9726b7a10f9	-	ol7_x86_64_latest_ELS
	python3-3.6.8-21.0.7.el7_9.x86_64.rpm	bfed193c1e92bc57595523849bf3535f9fd0efd69fb727b711413e6430c03a14	-	ol7_x86_64_latest_ELS
	python3-debug-3.6.8-21.0.7.el7_9.i686.rpm	5b282f1a51309737729ba2063871a1de2749e58d181b4c55c7c4fc28159ed806	-	ol7_x86_64_latest_ELS
	python3-debug-3.6.8-21.0.7.el7_9.x86_64.rpm	cbc58293f083537e283c7092dfdd689a8746a3fad2bdf2153d932b60d9e91f89	-	ol7_x86_64_latest_ELS
	python3-devel-3.6.8-21.0.7.el7_9.i686.rpm	7384dcbe8dadbc52e56d30d3e1934b94ce0950acc606c845858c2f9243e42cd3	-	ol7_x86_64_latest_ELS
	python3-devel-3.6.8-21.0.7.el7_9.x86_64.rpm	dcd85ec9346710c932fae87d1dc23a12b2d7a29f6efa50b4143f599ff6637a9e	-	ol7_x86_64_latest_ELS
	python3-idle-3.6.8-21.0.7.el7_9.i686.rpm	bc2f73463dd1ca298e4a9a3837c45581ba3715d4c2965b6ef38e1217dd4f5af0	-	ol7_x86_64_latest_ELS
	python3-idle-3.6.8-21.0.7.el7_9.x86_64.rpm	fb87c5c1547ed235d5e92d7fcf84caf197833918349fccadaa4aa57b02382a08	-	ol7_x86_64_latest_ELS
	python3-libs-3.6.8-21.0.7.el7_9.i686.rpm	4051b4658354c09afabe4bd7dd7a042fa53042ee6dd2d0975dd3dd62ac3ae6fa	-	ol7_x86_64_latest_ELS
	python3-libs-3.6.8-21.0.7.el7_9.x86_64.rpm	a272b84fd55b8f807d74e57fd84935559872a2328186b799948c000704304acf	-	ol7_x86_64_latest_ELS
	python3-test-3.6.8-21.0.7.el7_9.i686.rpm	5ce52b101fdbb14dbc4fefde37627d8e36ee9b72f9273a4d04181c3f33a12978	-	ol7_x86_64_latest_ELS
	python3-test-3.6.8-21.0.7.el7_9.x86_64.rpm	ea15fac6225d43911667334813928ce9e91980dc9511261db74dc2ad6bf46485	-	ol7_x86_64_latest_ELS
	python3-tkinter-3.6.8-21.0.7.el7_9.i686.rpm	5fe216538bc7bd4cca1ea4187c804a48681c23d3fdb57ab7bc98b56d4de9f8c0	-	ol7_x86_64_latest_ELS
	python3-tkinter-3.6.8-21.0.7.el7_9.x86_64.rpm	9aea0406da4c10e76b3f5ff88d17cf72f0ceacf3870335534368ac7766e60cf7	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team