ELSA-2026-84578 - python3.14-urllib3 security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-19 |
Description
[2.6.3-6]
- Fix a regression with Python 3.14.8
[2.6.3-5]
- Fix test_start_closed_socket with latest Python
[2.6.3-4]
- CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via
unbounded memory allocation in chunk parser
[2.6.3-3]
- CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception via
HTTPS proxy TLS configuration override
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 10 (aarch64) | python3.14-urllib3-2.6.3-2.el10_2.6.src.rpm | 69983e7ca16e816800f12879c4580a17274a6254384596dcfe5f85b8fc1c7915 | - | ol10_aarch64_appstream |
| python3.14-urllib3-2.6.3-2.el10_2.6.noarch.rpm | 5aad3002076f1ee7a30448b3ca162bdd4f997664f29ae9a9cb7c3d6bcafb4f1f | - | ol10_aarch64_appstream |
|
| Oracle Linux 10 (x86_64) | python3.14-urllib3-2.6.3-2.el10_2.6.src.rpm | 69983e7ca16e816800f12879c4580a17274a6254384596dcfe5f85b8fc1c7915 | - | ol10_x86_64_appstream |
| python3.14-urllib3-2.6.3-2.el10_2.6.noarch.rpm | 5aad3002076f1ee7a30448b3ca162bdd4f997664f29ae9a9cb7c3d6bcafb4f1f | - | ol10_x86_64_appstream |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
