239 matches found
MGASA-2026-0419 Updated python-httplib2 packages fix a security vulnerability
Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling. CVE-2026-59939...
Updated python-httplib2 packages fix a security vulnerability
Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling. CVE-2026-59939...
Astra Linux – Vulnerability in python-httplib2
In httplib2 before version 0.18.0, an attacker who controlled unescaped parts of the URI for httplib2.Http.request could alter request headers and the request body, and send additional hidden requests to the same server. This vulnerability affects software that uses httplib2 with URIs constructed...
Astra Linux – Vulnerability in python-httplib2
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server that responded with a long series of "\xa0" characters in the “www-authenticate” header could cause a Denial of Service attack, resulting in excessive CPU usage during header parsing ...
Security update for python-httplib2
This update for python-httplib2 fixes the following issue: CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate can lead to OOM-kill in the client process when it connects to a compromised HTTP server bsc1271095. Patch Instructions: To...
SUSE-SU-2026:3898-1 Security update for python-httplib2
This update for python-httplib2 fixes the following issue: - CVE-2026-59939: unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate can lead to OOM-kill in the client process when it connects to a compromised HTTP server bsc1271095...
ROOT-APP-PYPI-CVE-2026-59939 CVE-2026-59939 in httplib2 - Patched by Root
Root has patched CVE-2026-59939 in the httplib2 package for Root:PyPI. Multiple fixed versions available...
MiracleLinux 9 : fence-agents-4.10.0-110.el9_8.5 (AXSA:2026-1605:15)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1605:15 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description bloc...
[SECURITY] [DLA 4748-1] python-httplib2 security update
Debian LTS Advisory DLA-4748-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias August 20, 2026 https://wiki.debian.org/LTS Package : python-httplib2 Version : 0.20.4-3+deb12u1 CVE ID : CVE-2026-59939 A flaw was discovered in python-httplib2, a comprehensive Python...
[SECURITY] [DLA 4747-1] python-httplib2 security update
Debian LTS Advisory DLA-4747-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias August 20, 2026 https://wiki.debian.org/LTS Package : python-httplib2 Version : 0.18.1-3+deb11u1 CVE ID : CVE-2021-21240 CVE-2026-59939 Debian Bug : 982738 Two vulnerabilities were...
Debian dla-4747 : python3-httplib2 - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4747 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4747-1 [email protected]...
Debian dla-4748 : python3-httplib2 - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4748 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4748-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DSA 6441-1] python-httplib2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6441-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2026 https://www.debian.org/security/faq -...
Debian dsa-6441 : python3-httplib2 - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6441 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6441-1 [email protected] https://www.debian.org/security/...
fence-agents security update
An update is available for fence-agents. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fence-agents packages provide a collection of scripts for handling...
openSUSE 16 Security Update : python-httplib2 (openSUSE-SU-2026:21526-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21526-1 advisory. This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could...
httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies
A flaw was found in httplib2, a Python HTTP client library. This vulnerability allows a malicious or compromised HTTP server to send a small compressed data payload that, when decompressed by httplib2, expands to an extremely large size in memory. This unbounded decompression can lead to a Denial...
Important: Red Hat Security Advisory: fence-agents security update
An update for fence-agents is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies
A flaw was found in httplib2, a Python HTTP client library. This vulnerability allows a malicious or compromised HTTP server to send a small compressed data payload that, when decompressed by httplib2, expands to an extremely large size in memory. This unbounded decompression can lead to a Denial...
Important: Red Hat Security Advisory: fence-agents security update
An update for fence-agents is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...