Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-5588

Опубликовано: 24 мар. 2026
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2026-5588: python3 security update (MODERATE)

[3.6.8-74.0.1]

  • Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8.openela.0]

  • Add openela to supported dists

[3.6.8-74]

  • Security fix for CVE-2025-0938 Resolves: RHEL-153235

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

platform-python

3.6.8-74.0.1.el8_10

platform-python-debug

3.6.8-74.0.1.el8_10

platform-python-devel

3.6.8-74.0.1.el8_10

python3-idle

3.6.8-74.0.1.el8_10

python3-libs

3.6.8-74.0.1.el8_10

python3-test

3.6.8-74.0.1.el8_10

python3-tkinter

3.6.8-74.0.1.el8_10

Oracle Linux x86_64

platform-python

3.6.8-74.0.1.el8_10

platform-python-debug

3.6.8-74.0.1.el8_10

platform-python-devel

3.6.8-74.0.1.el8_10

python3-idle

3.6.8-74.0.1.el8_10

python3-libs

3.6.8-74.0.1.el8_10

python3-test

3.6.8-74.0.1.el8_10

python3-tkinter

3.6.8-74.0.1.el8_10

Связанные CVE

Связанные уязвимости

ubuntu
около 1 года назад

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.

CVSS3: 6.8
redhat
около 1 года назад

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.

nvd
около 1 года назад

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.

msrc
около 1 года назад

URL parser allowed square brackets in domain names

debian
около 1 года назад

The Python standard library functions `urllib.parse.urlsplit` and `url ...