[El-errata] ELSA-2026-89742 Important: Oracle Linux 9 python3.9 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-89742

http://linux.oracle.com/errata/ELSA-2026-89742.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
python-unversioned-command-3.9.25-7.0.1.el9_8.6.noarch.rpm
python3-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-3.9.25-7.0.1.el9_8.6.x86_64.rpm
python3-debug-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-debug-3.9.25-7.0.1.el9_8.6.x86_64.rpm
python3-devel-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-devel-3.9.25-7.0.1.el9_8.6.x86_64.rpm
python3-idle-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-idle-3.9.25-7.0.1.el9_8.6.x86_64.rpm
python3-libs-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-libs-3.9.25-7.0.1.el9_8.6.x86_64.rpm
python3-test-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-test-3.9.25-7.0.1.el9_8.6.x86_64.rpm
python3-tkinter-3.9.25-7.0.1.el9_8.6.i686.rpm
python3-tkinter-3.9.25-7.0.1.el9_8.6.x86_64.rpm

aarch64:
python-unversioned-command-3.9.25-7.0.1.el9_8.6.noarch.rpm
python3-3.9.25-7.0.1.el9_8.6.aarch64.rpm
python3-debug-3.9.25-7.0.1.el9_8.6.aarch64.rpm
python3-devel-3.9.25-7.0.1.el9_8.6.aarch64.rpm
python3-idle-3.9.25-7.0.1.el9_8.6.aarch64.rpm
python3-libs-3.9.25-7.0.1.el9_8.6.aarch64.rpm
python3-test-3.9.25-7.0.1.el9_8.6.aarch64.rpm
python3-tkinter-3.9.25-7.0.1.el9_8.6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/python3.9-3.9.25-7.0.1.el9_8.6.src.rpm

Related CVEs:

CVE-2026-12345
CVE-2026-19445
CVE-2026-19553




Description of changes:

[3.9.25-7.0.1.el9_8.6]
- Remove upstream URL reference

[3.9.25-7.6]
- CVE-2026-19553 python3.9: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
Resolves: RHEL-274143

[3.9.25-7.5]
- CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext when sni_callback switches contexts
Resolves: RHEL-276263

[3.9.25-7.4]
- CVE-2026-12345 python3.9: python: Arbitrary file deletion via race condition during temporary directory cleanup
Resolves: RHEL-272937

[3.9.25-7.3]
- Security fix for CVE-2026-11940
Resolves: RHEL-227228

[3.9.25-7.2]
- Security fix for CVE-2026-15308
Resolves: RHEL-193786

[3.9.25-7.1]
- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207