Summary
[3.14.5-1.1]
- Security fix for CVE-2026-15308
Resolves: RHEL-193779
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.14 | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-debug | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-devel | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading-debug | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading-devel | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading-idle | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading-libs | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading-test | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-freethreading-tkinter | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-idle | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-libs | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-test | 0:3.14.5-1.el9_8.1 |
| Oracle Linux · 9 | python3.14-tkinter | 0:3.14.5-1.el9_8.1 |
Vulnerabilities 1
-
High 8.7
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.