ELSA-2026-90759

ELSA-2026-90759 - python-urllib3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-27

Description

[1.24.2-11]
- CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser
memory allocation in chunk parser
Resolves: RHEL-282251

Related CVEs

CVE-2026-97689

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	python-urllib3-1.24.2-11.el8_10.src.rpm	5fb496117af63fa80136cf734dff4c363fc80b083ba4595a76b878b1f8487b67	-	ol8_aarch64_baseos_latest
	python-urllib3-1.24.2-11.el8_10.src.rpm	5fb496117af63fa80136cf734dff4c363fc80b083ba4595a76b878b1f8487b67	-	ol8_aarch64_u10_baseos_patch
	python3-urllib3-1.24.2-11.el8_10.noarch.rpm	ec97f6e5c6702c5aa4074531b1ebf3a37d1f44d7427425e6c1a21ab96d39669f	-	ol8_aarch64_baseos_latest
	python3-urllib3-1.24.2-11.el8_10.noarch.rpm	ec97f6e5c6702c5aa4074531b1ebf3a37d1f44d7427425e6c1a21ab96d39669f	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	python-urllib3-1.24.2-11.el8_10.src.rpm	5fb496117af63fa80136cf734dff4c363fc80b083ba4595a76b878b1f8487b67	-	ol8_x86_64_baseos_latest
	python-urllib3-1.24.2-11.el8_10.src.rpm	5fb496117af63fa80136cf734dff4c363fc80b083ba4595a76b878b1f8487b67	-	ol8_x86_64_u10_baseos_patch
	python3-urllib3-1.24.2-11.el8_10.noarch.rpm	ec97f6e5c6702c5aa4074531b1ebf3a37d1f44d7427425e6c1a21ab96d39669f	-	ol8_x86_64_baseos_latest
	python3-urllib3-1.24.2-11.el8_10.noarch.rpm	ec97f6e5c6702c5aa4074531b1ebf3a37d1f44d7427425e6c1a21ab96d39669f	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team