Summary
[3.12.9-1]
- Update to 3.12.9
- Security fix for CVE-2025-0938
Resolves: RHEL-77261
[3.12.8-1]
- Update to 3.12.8
- Security fix for CVE-2024-9287 and CVE-2024-12254
Resolves: RHEL-64886, RHEL-70320
[3.12.6-1]
- Update to 3.12.6
Resolves: RHEL-57417
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.12 | 0:3.12.9-1.el9 |
| Oracle Linux · 9 | python3.12-debug | 0:3.12.9-1.el9 |
| Oracle Linux · 9 | python3.12-devel | 0:3.12.9-1.el9 |
| Oracle Linux · 9 | python3.12-idle | 0:3.12.9-1.el9 |
| Oracle Linux · 9 | python3.12-libs | 0:3.12.9-1.el9 |
| Oracle Linux · 9 | python3.12-test | 0:3.12.9-1.el9 |
| Oracle Linux · 9 | python3.12-tkinter | 0:3.12.9-1.el9 |
Vulnerabilities 1
-
Medium 6.3
URL parser allowed square brackets in domain names
The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture…