ELSA-2026-84577

Type: Security

Severity: Important

Published: 2026-10-19

Oracle Linux 9

[2.6.3-6] - Fix a regression with Python 3.14.8 [2.6.3-5] - Fix test_start_closed_socket with latest Python [2.6.3-4] - CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser [2.6.3-3] - CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-25T12:15:53.228Z UTC

Official vendor advisory

Oracle Linux 9

View source

Observed 2026-10-25T12:15:53.228Z UTC. Last updated 2026-10-19T12:07:48.092Z UTC.

Upstream Advisory

Affected Packages

python3.14-urllib3 2.6.3-2.el9_8.6

Interested in being alerted when there are new versions of python3.14-urllib3? Set up an alert.