Skip to content
OpenAdvisories
Medium ELSA-2026-54481 1 CVE

Moderate: python-idna security update (Oracle Linux 10)

Published Aug 13, 2026 · Updated Aug 13, 2026

Ecosystem: Oracle Linux

Summary

[3.7-6]
- Fix CVE-2026-45409: quadratic time complexity in IDNA validation

[3.7-5]
- rpminspect: Disable the unicode inspection

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 python3-idna 0:3.7-6.el10_2

Vulnerabilities 1

  • Medium 6.9
    CVE-2026-45409

    Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

    Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N …

    kjd idna open-webui katib-suggestion-hyperopt Debian Ubuntu Wolfi PyPI