[El-errata] ELSA-2025-10140 Important: Oracle Linux 10 python3.12 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2025-10140

http://linux.oracle.com/errata/ELSA-2025-10140.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
python-unversioned-command-3.12.9-2.0.1.el10_0.2.noarch.rpm
python3-3.12.9-2.0.1.el10_0.2.x86_64.rpm
python3-debug-3.12.9-2.0.1.el10_0.2.x86_64.rpm
python3-devel-3.12.9-2.0.1.el10_0.2.x86_64.rpm
python3-idle-3.12.9-2.0.1.el10_0.2.x86_64.rpm
python3-libs-3.12.9-2.0.1.el10_0.2.x86_64.rpm
python3-test-3.12.9-2.0.1.el10_0.2.x86_64.rpm
python3-tkinter-3.12.9-2.0.1.el10_0.2.x86_64.rpm

aarch64:
python-unversioned-command-3.12.9-2.0.1.el10_0.2.noarch.rpm
python3-3.12.9-2.0.1.el10_0.2.aarch64.rpm
python3-debug-3.12.9-2.0.1.el10_0.2.aarch64.rpm
python3-devel-3.12.9-2.0.1.el10_0.2.aarch64.rpm
python3-idle-3.12.9-2.0.1.el10_0.2.aarch64.rpm
python3-libs-3.12.9-2.0.1.el10_0.2.aarch64.rpm
python3-test-3.12.9-2.0.1.el10_0.2.aarch64.rpm
python3-tkinter-3.12.9-2.0.1.el10_0.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/python3.12-3.12.9-2.0.1.el10_0.2.src.rpm

Related CVEs:

CVE-2024-12718
CVE-2025-4138
CVE-2025-4330
CVE-2025-4435
CVE-2025-4517




Description of changes:

[3.12.9-2.0.1.2]
- Remove upstream URL reference

[3.12.9-2.2]
- Enable PAC and BTI protections for aarch64
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
- Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-98184, RHEL-98211

[3.12.9-2.1]
- Apply Intel's CET for mitigation against control-flow hijacking attacks