Summary
[3.12.13-2.0.1.el10_2.1]
- Remove upstream URL reference
[3.12.13-2.1]
- Security fix for CVE-2026-15308
Resolves: RHEL-193771
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python-unversioned-command | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3 | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-debug | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-devel | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-idle | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-libs | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-test | 0:3.12.13-2.0.1.el10_2.1 |
| Oracle Linux · 10 | python3-tkinter | 0:3.12.13-2.0.1.el10_2.1 |
Vulnerabilities 1
-
High 8.7
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.