Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-6256

Опубликовано: 31 мар. 2026
Источник: oracle-oval
Платформа: Oracle Linux 10

Описание

ELSA-2026-6256: python3.12 security update (IMPORTANT)

[3.12.12-3.0.1.el10_1.2]

  • Remove upstream URL reference

[3.12.12-3.2]

  • Security fix for CVE-2026-4519 Resolves: RHEL-158127

[3.12.12-3.1]

  • Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143054 RHEL-143105 RHEL-144852

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

python-unversioned-command

3.12.12-3.0.1.el10_1.2

python3

3.12.12-3.0.1.el10_1.2

python3-debug

3.12.12-3.0.1.el10_1.2

python3-devel

3.12.12-3.0.1.el10_1.2

python3-idle

3.12.12-3.0.1.el10_1.2

python3-libs

3.12.12-3.0.1.el10_1.2

python3-test

3.12.12-3.0.1.el10_1.2

python3-tkinter

3.12.12-3.0.1.el10_1.2

Oracle Linux x86_64

python-unversioned-command

3.12.12-3.0.1.el10_1.2

python3

3.12.12-3.0.1.el10_1.2

python3-debug

3.12.12-3.0.1.el10_1.2

python3-devel

3.12.12-3.0.1.el10_1.2

python3-idle

3.12.12-3.0.1.el10_1.2

python3-libs

3.12.12-3.0.1.el10_1.2

python3-test

3.12.12-3.0.1.el10_1.2

python3-tkinter

3.12.12-3.0.1.el10_1.2

Связанные CVE

Связанные уязвимости

ubuntu
18 дней назад

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

CVSS3: 7.1
redhat
18 дней назад

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

nvd
18 дней назад

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

msrc
14 дней назад

webbrowser.open() allows leading dashes in URLs

debian
18 дней назад

The webbrowser.open() API would accept leading dashes in the URL which ...