ELSA-2026-84577 - python3.14-urllib3 security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-19 |
Description
[2.6.3-6]
- Fix a regression with Python 3.14.8
[2.6.3-5]
- Fix test_start_closed_socket with latest Python
[2.6.3-4]
- CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via
unbounded memory allocation in chunk parser
[2.6.3-3]
- CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception via
HTTPS proxy TLS configuration override
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 9 (aarch64) | python3.14-urllib3-2.6.3-2.el9_8.6.src.rpm | 35f73e96391123648876bcbe60746beeaf4877e6c0b7d09a744dc1b1549de990 | - | ol9_aarch64_appstream |
| python3.14-urllib3-2.6.3-2.el9_8.6.noarch.rpm | f5ae6d5c46c52dc3d9e203da16defaeb822ce57e5a65e550b6f8361e8d5cd182 | - | ol9_aarch64_appstream |
|
| Oracle Linux 9 (x86_64) | python3.14-urllib3-2.6.3-2.el9_8.6.src.rpm | 35f73e96391123648876bcbe60746beeaf4877e6c0b7d09a744dc1b1549de990 | - | ol9_x86_64_appstream |
| python3.14-urllib3-2.6.3-2.el9_8.6.noarch.rpm | f5ae6d5c46c52dc3d9e203da16defaeb822ce57e5a65e550b6f8361e8d5cd182 | - | ol9_x86_64_appstream |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
