Summary
[3.11.11-2]
- Security fix for CVE-2025-0938
Resolves: RHEL-77262
[3.11.11-1]
- Update to 3.11.11
Resolves: RHEL-64883
[3.11.10-1]
- Update to 3.11.10
Resolves: RHEL-57412
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.11 | 0:3.11.11-2.el9 |
| Oracle Linux · 9 | python3.11-debug | 0:3.11.11-2.el9 |
| Oracle Linux · 9 | python3.11-devel | 0:3.11.11-2.el9 |
| Oracle Linux · 9 | python3.11-idle | 0:3.11.11-2.el9 |
| Oracle Linux · 9 | python3.11-libs | 0:3.11.11-2.el9 |
| Oracle Linux · 9 | python3.11-test | 0:3.11.11-2.el9 |
| Oracle Linux · 9 | python3.11-tkinter | 0:3.11.11-2.el9 |
Vulnerabilities 1
-
Medium 6.3
URL parser allowed square brackets in domain names
The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture…