ELSA-2026-85929

ELSA-2026-85929 - python3.12-urllib3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-20

Description

[1.26.19-3.2]
- CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via
unbounded memory allocation in chunk parser
Resolves: RHEL-282261

[1.26.19-3.1]
- CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override
HTTPS proxy TLS configuration override
Resolves: RHEL-282321

Related CVEs

CVE-2026-97687

CVE-2026-97689

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	python3.12-urllib3-1.26.19-3.el9_8.2.src.rpm	7fdb948e286eb61654e490fe52260a244c933140d88fed2253f87919243bb227	-	ol9_aarch64_appstream
	python3.12-urllib3-1.26.19-3.el9_8.2.noarch.rpm	cdf5d096846063b91881e65108e45528332d344a565555ce9dc3466824885f2e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	python3.12-urllib3-1.26.19-3.el9_8.2.src.rpm	7fdb948e286eb61654e490fe52260a244c933140d88fed2253f87919243bb227	-	ol9_x86_64_appstream
	python3.12-urllib3-1.26.19-3.el9_8.2.noarch.rpm	cdf5d096846063b91881e65108e45528332d344a565555ce9dc3466824885f2e	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team