Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-47126

Опубликовано: 05 авг. 2026
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2026-47126: resource-agents security update (MODERATE)

[4.9.0-54.36]

  • bundled urllib3: fix CVE-2026-44431

    Resolves: RHEL-178598

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

resource-agents

4.9.0-54.el8_10.36

Oracle Linux x86_64

resource-agents

4.9.0-54.el8_10.36

Связанные CVE

Связанные уязвимости

CVSS3: 5.3
ubuntu
6 месяцев назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

CVSS3: 5.9
redhat
6 месяцев назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

CVSS3: 5.3
nvd
6 месяцев назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

msrc
6 месяцев назад

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

CVSS3: 5.3
debian
6 месяцев назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7. ...