ELSA-2026-6464

ELSA-2026-6464 - python3 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-04-16

Description

[3.6.8-21.0.9]
- Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 [Orabug: 39159999]

[3.6.8-21.0.7]
- Security update CVE-2025-12084 [Orabug: 38971895]

[3.6.8-21.0.5]
- tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194]

[3.6.8-21.0.3]
- Fix DoS parsing crafted tarfile headers [Orabug: 37626372][CVE-2024-6232]
- Disable test_socket in the PGO profile task.

Related CVEs

CVE-2025-15366

CVE-2025-15367

CVE-2026-1299

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	python3-3.6.8-21.0.9.el7_9.src.rpm	145dd325b6c1c430137fe03a0f6f40a459289df694899b3f3f09f38b65ea7af0	-	ol7_x86_64_latest_ELS
	python3-3.6.8-21.0.9.el7_9.i686.rpm	775d1f0f802b19261223f7dfcf530fff8894a483929021b7ce5f27e81ad24249	-	ol7_x86_64_latest_ELS
	python3-3.6.8-21.0.9.el7_9.x86_64.rpm	9526461a560015f863bd60710f78d67c5842809b12cc0639946b417485ca4dd4	-	ol7_x86_64_latest_ELS
	python3-debug-3.6.8-21.0.9.el7_9.i686.rpm	c188ddde574b65e1d05e4fdcbae7c94082a38973b936de405b87ba1da5a732e5	-	ol7_x86_64_latest_ELS
	python3-debug-3.6.8-21.0.9.el7_9.x86_64.rpm	b6a41f8f3309eea108f1ee2bf64a653e7e00b313eb35823ec3e33a58b371f76d	-	ol7_x86_64_latest_ELS
	python3-devel-3.6.8-21.0.9.el7_9.i686.rpm	aa883c355cf944c2b2e7dd65a01d57ef9ceb466dee4f329a2c2357b4fe4c4fa0	-	ol7_x86_64_latest_ELS
	python3-devel-3.6.8-21.0.9.el7_9.x86_64.rpm	4fb5002fa23a855ae906c05b428ce05fa6ab79241fe8a7a1b59c5a3299e3be4c	-	ol7_x86_64_latest_ELS
	python3-idle-3.6.8-21.0.9.el7_9.i686.rpm	e70ac84bb15557a171061523a4dc900be744c2e617e88241a5c3788442876e4c	-	ol7_x86_64_latest_ELS
	python3-idle-3.6.8-21.0.9.el7_9.x86_64.rpm	3c92c1a407e4dc901519af8de5ad85223592bf0a75d40037b65d70d95d718ee8	-	ol7_x86_64_latest_ELS
	python3-libs-3.6.8-21.0.9.el7_9.i686.rpm	23d71465910e18e6b726b794df109731c4d4f0ba3a0c11a0156c2da9a05cdf22	-	ol7_x86_64_latest_ELS
	python3-libs-3.6.8-21.0.9.el7_9.x86_64.rpm	2ad03f3d23425c48d02353ed89db37778ecd82a5b89d28bcd4ed0473ff664f03	-	ol7_x86_64_latest_ELS
	python3-test-3.6.8-21.0.9.el7_9.i686.rpm	a57a799a21ef23b0b0ec04116b927014e06401951a311cf93a782d4b73b19f10	-	ol7_x86_64_latest_ELS
	python3-test-3.6.8-21.0.9.el7_9.x86_64.rpm	1d5b9a2a300d696560abbe422992104e8b2ad9720e1053fd3d06568059faed8e	-	ol7_x86_64_latest_ELS
	python3-tkinter-3.6.8-21.0.9.el7_9.i686.rpm	f68b5744b164d45bff76737eb5343c5032bae700cf58f907f7212c1c69d9023a	-	ol7_x86_64_latest_ELS
	python3-tkinter-3.6.8-21.0.9.el7_9.x86_64.rpm	da71744942cac7320e972acea5c8fdab1b5a9abefa0cfe07455b36c9c8d00c71	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team