ELSA-2026-92474

ELSA-2026-92474 - python3.12-urllib3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-29

Description

[1.26.19-5]
- CVE-2026-97689 Denial of Service via unbounded memory allocation in chunk parser
Resolves: RHEL-282256

[1.26.19-4]
- CVE-2026-97687 Traffic interception via HTTPS proxy TLS configuration override
Resolves: RHEL-282315

Related CVEs

CVE-2026-97687

CVE-2026-97689

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	python3.12-urllib3-1.26.19-5.el8_10.src.rpm	bb6dd0bbd9ac4e6ec00266352cc1af9bc466da5dd079814cb10d0a65704c4f51	-	ol8_aarch64_appstream
	python3.12-urllib3-1.26.19-5.el8_10.noarch.rpm	d0bdbefec65cdc2bb76e0fc712124a10a5b9a61d74f6c6b3b5ad65f50d6b8eec	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	python3.12-urllib3-1.26.19-5.el8_10.src.rpm	bb6dd0bbd9ac4e6ec00266352cc1af9bc466da5dd079814cb10d0a65704c4f51	-	ol8_x86_64_appstream
	python3.12-urllib3-1.26.19-5.el8_10.noarch.rpm	d0bdbefec65cdc2bb76e0fc712124a10a5b9a61d74f6c6b3b5ad65f50d6b8eec	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team