Summary
[3.12.13-3.0.1.el9_8.1]
- Remove upstream URL reference
[3.12.13-3.1]
- Security fix for CVE-2026-15308
Resolves: RHEL-RHEL-193793
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.12 | 0:3.12.13-3.0.1.el9_8.1 |
| Oracle Linux · 9 | python3.12-debug | 0:3.12.13-3.0.1.el9_8.1 |
| Oracle Linux · 9 | python3.12-devel | 0:3.12.13-3.0.1.el9_8.1 |
| Oracle Linux · 9 | python3.12-idle | 0:3.12.13-3.0.1.el9_8.1 |
| Oracle Linux · 9 | python3.12-libs | 0:3.12.13-3.0.1.el9_8.1 |
| Oracle Linux · 9 | python3.12-test | 0:3.12.13-3.0.1.el9_8.1 |
| Oracle Linux · 9 | python3.12-tkinter | 0:3.12.13-3.0.1.el9_8.1 |
Vulnerabilities 1
-
High 8.7
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.