Medium ELSA-2026-47126 1 CVE

Moderate: resource-agents security update (Oracle Linux 8)

Published Aug 5, 2026 · Updated Aug 5, 2026

Ecosystem: Oracle Linux

Summary

[4.9.0-54.36]
- bundled urllib3: fix CVE-2026-44431

Resolves: RHEL-178598

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	resource-agents	0:4.9.0-54.el8_10.36

Vulnerabilities 1

High 8.2

CVE-2026-44431

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerabili…

urllib3 urllib3 open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi PyPI

May 13, 2026