ELSA-2026-28158

ELSA-2026-28158 - python-urllib3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-24

Description

[1.26.5-8]
- Security fix for CVE-2026-44431 and CVE-2026-44432
Resolves: RHEL-184816, RHEL-185123

[1.26.5-7]
- Security fix for CVE-2025-66471
- Security fix for CVE-2025-66418
- Security fix for CVE-2026-21441
Resolves: RHEL-142750, RHEL-139398, RHEL-142767

Related CVEs

CVE-2026-44431

CVE-2026-44432

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	python-urllib3-1.26.5-8.el9_8.src.rpm	7040a1ccd235115e82ddb6713d0ce9c734579c798c2eaf1b1b4bf6555d40fee9	-	ol9_aarch64_baseos_latest
	python-urllib3-1.26.5-8.el9_8.src.rpm	7040a1ccd235115e82ddb6713d0ce9c734579c798c2eaf1b1b4bf6555d40fee9	-	ol9_aarch64_u8_baseos_patch
	python3-urllib3-1.26.5-8.el9_8.noarch.rpm	044809e414d5cfb2091a084ea791abbc993907fe29e899994b43795920e7e74d	-	ol9_aarch64_baseos_latest
	python3-urllib3-1.26.5-8.el9_8.noarch.rpm	044809e414d5cfb2091a084ea791abbc993907fe29e899994b43795920e7e74d	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	python-urllib3-1.26.5-8.el9_8.src.rpm	7040a1ccd235115e82ddb6713d0ce9c734579c798c2eaf1b1b4bf6555d40fee9	-	ol9_x86_64_baseos_latest
	python-urllib3-1.26.5-8.el9_8.src.rpm	7040a1ccd235115e82ddb6713d0ce9c734579c798c2eaf1b1b4bf6555d40fee9	-	ol9_x86_64_u8_baseos_patch
	python3-urllib3-1.26.5-8.el9_8.noarch.rpm	044809e414d5cfb2091a084ea791abbc993907fe29e899994b43795920e7e74d	-	ol9_x86_64_baseos_latest
	python3-urllib3-1.26.5-8.el9_8.noarch.rpm	044809e414d5cfb2091a084ea791abbc993907fe29e899994b43795920e7e74d	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team