Summary
[3.9.21-2]
- Security fix for CVE-2025-0938
Resolves: RHEL-77263
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python-unversioned-command | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3 | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3-debug | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3-devel | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3-idle | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3-libs | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3-test | 0:3.9.21-2.el9 |
| Oracle Linux · 9 | python3-tkinter | 0:3.9.21-2.el9 |
Vulnerabilities 1
-
Medium 6.3
URL parser allowed square brackets in domain names
The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture…