Ubuntu: Security Advisory (USN-7927-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2026:10049-1 python311-urllib3-2.6.3-1.1 on GA media

These are all security issues fixed in the python311-urllib3-2.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7955-1 python-urllib3 vulnerability

It was discovered that urllib3 incorrectly handled decompression during HTTP redirects. An attacker could possibly use this issue to cause urllib3 to use excessive resources, causing a denial of service...

ROOT-OS-DEBIAN-12-CVE-2026-21441 CVE-2026-21441 in rootio-python-urllib3 - Patched by Root

Root has patched CVE-2026-21441 in the rootio-python-urllib3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-66418 CVE-2025-66418 in rootio-python-urllib3 - Patched by Root

Root has patched CVE-2025-66418 in the rootio-python-urllib3 package for Root:Debian:12. Multiple fixed versions available...

Fedora: Security Advisory (FEDORA-2026-724d1b1044)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : python-urllib3 (2026-724d1b1044)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-724d1b1044 advisory. 2.6.3 2026-01-07 - Fixed a high-severity security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were...

OPENSUSE-SU-2026:10026-1 python311-urllib3-2.6.2-1.1 on GA media

These are all security issues fixed in the python311-urllib3-2.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

AZL-73730 CVE-2026-21441 affecting package python-urllib3 for versions less than 2.0.7-4

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP...

PT-2026-28928

Уязвимость библиотеки python-urllib3 связана с некорректной обработкой сильно сжатых входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Critical Photon OS Security Update - PHSA-2026-4.0-0938

Updates of 'gst-plugins-bad', 'capstone', 'sssd', 'python3-urllib3' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0726

Updates of 'sssd', 'python3-urllib3', 'net-snmp' packages of Photon OS have been released...

Medium: python-urllib3

Issue Overview: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage an...

Critical Photon OS Security Update - PHSA-2026-5.0-0726

Updates of 'net-snmp', 'python3-urllib3', 'sssd' packages of Photon OS have been released...

Amazon Linux 2 : python-urllib3, --advisory ALAS2-2025-3110 (ALAS-2025-3110)

The version of python-urllib3 installed on the remote host is prior to 1.25.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3110 advisory. urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number...

Debian: Security Advisory (DLA-4421-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4421-1] python-urllib3 security update

Debian LTS Advisory DLA-4421-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 26, 2025 https://wiki.debian.org/LTS Package : python-urllib3 Version : 1.26.5-1exp1+deb11u2 CVE ID : CVE-2025-50181 CVE-2025-66418 Debian Bug : 1108076 1122030 Vulnerabilities...

DLA-4421-1 python-urllib3 - security update

Bulletin has no description...

Debian dla-4421 : python3-urllib3 - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4421 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4421-1 [email protected]...

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2598)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...