ELSA-2026-84578

Type: Security

Severity: Unknown

Published: 2026-10-19

Oracle Linux 10

[2.6.3-6] - Fix a regression with Python 3.14.8 [2.6.3-5] - Fix test_start_closed_socket with latest Python [2.6.3-4] - CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser [2.6.3-3] - CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-25T04:15:50.560Z UTC

Official vendor advisory

Oracle Linux 10

View source

Observed 2026-10-25T04:15:50.560Z UTC. Last updated 2026-10-19T11:23:42.778Z UTC.

Upstream Advisory

Affected Packages

python3.14-urllib3 2.6.3-2.el10_2.6
python3.14-urllib3 2.6.3-2.el10_2.6

Interested in being alerted when there are new versions of python3.14-urllib3, etc? Set up an alert.