ELSA-2026-85929

Type: Security

Severity: Important

Published: 2026-10-20

Oracle Linux 9

[1.26.19-3.2] - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282261 [1.26.19-3.1] - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration override Resolves: RHEL-282321

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-25T10:04:00.429Z UTC

Official vendor advisory

Oracle Linux 9

View source

Observed 2026-10-25T10:04:00.429Z UTC. Last updated 2026-10-20T22:20:19.633Z UTC.

Upstream Advisory

Affected Packages

python3.12-urllib3 1.26.19-3.el9_8.2

Interested in being alerted when there are new versions of python3.12-urllib3? Set up an alert.