Summary
[3.9.25-7.0.1]
- Remove upstream URL reference
[3.9.25-7]
- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161
[3.9.25-6]
- Security fix for CVE-2026-4519
Resolves: RHEL-158117
[3.9.25-5]
- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897
[3.9.25-4]
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python-unversioned-command | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3 | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3-debug | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3-devel | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3-idle | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3-libs | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3-test | 0:3.9.25-7.0.1.el9_8 |
| Oracle Linux · 9 | python3-tkinter | 0:3.9.25-7.0.1.el9_8 |
Vulnerabilities 1
-
Medium 5.9
wsgiref.headers.Headers allows header newline injection
User-controlled header names and values containing newlines can allow injecting HTTP headers.