Summary
[3.14.5-1.1]
- Security fix for CVE-2026-15308
Resolves: RHEL-193775
[3.14.5-1]
- Update to 3.14.5
Resolves: RHEL-176147
[3.14.5~rc1-1]
- Update to 3.14.5rc1
- Move back to the generational from the incremental garbage collector
- Security fix for CVE-2026-6019
Resolves: RHEL-176147
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3.14 | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-debug | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-devel | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading-debug | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading-devel | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading-idle | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading-libs | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading-test | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-freethreading-tkinter | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-idle | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-libs | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-test | 0:3.14.5-1.el10_2.1 |
| Oracle Linux · 10 | python3.14-tkinter | 0:3.14.5-1.el10_2.1 |
Vulnerabilities 1
-
High 8.7
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.