ELSA-2026-85930

Type: Security

Severity: Important

Published: 2026-10-20

Oracle Linux 10

[1.26.19-4.2] - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282258 [1.26.19-4.1] - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration override Resolves: RHEL-282317

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-24T09:15:45.622Z UTC

Official vendor advisory

Oracle Linux 10

View source

Observed 2026-10-24T09:15:45.622Z UTC. Last updated 2026-10-20T22:41:55.260Z UTC.

Upstream Advisory

View official advisory

Affected Packages

python3-urllib3 1.26.19-4.el10_2.2

Interested in being alerted when there are new versions of python3-urllib3? Set up an alert.