DLA-4421-1 python-urllib3 - security update

Bulletin has no description...

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2563)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2598)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3

CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3. A patched version of the package is available...

CVE-2025-66471 affecting package python-urllib3 for versions less than 2.0.7-3

CVE-2025-66471 affecting package python-urllib3 for versions less than 2.0.7-3. A patched version of the package is available...

EulerOS Virtualization 2.13.0 : python-urllib3 (EulerOS-SA-2025-2598)

According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all...

[SECURITY] Fedora 43 Update: python-urllib3-2.6.1-1.fc43

urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...

Ubuntu: Security Advisory (USN-7927-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : brotli / perl-Alien-Brotli / python-urllib3 (2025-d93200cf16)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-d93200cf16 advisory. Update brotli to 1.2.0 and python-urllib3 to 2.6.1. In python-urllib3: - Fixed a security issue where streaming API could improperly handle highly...

GHSA-GM62-XV2J-4W53 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, semgrep, airflow, ansible-operator-fips, localstack, dask-kubernetes, azure-functions-host, apache-beam-python-3.11-sdk, datadog-agent-fips, kubeflow-katib, mlflow, nemo, nvidia-nsight-compute-13.3, kserve, k8s-sidecar, open-webui, superse...

GHSA-2XPW-W6GG-JR37 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, semgrep, airflow, ansible-operator-fips, localstack, dask-kubernetes, azure-functions-host, apache-beam-python-3.11-sdk, datadog-agent-fips, kubeflow-katib, mlflow, nemo, nvidia-nsight-compute-13.3, kserve, k8s-sidecar, open-webui, superse...

CVE-2025-66471 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, semgrep, airflow, ansible-operator-fips, localstack, dask-kubernetes, azure-functions-host, apache-beam-python-3.11-sdk, datadog-agent-fips, kubeflow-katib, mlflow, nemo, nvidia-nsight-compute-13.3, kserve, k8s-sidecar, open-webui, superse...

CVE-2025-66418 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.2, semgrep, airflow, ansible-operator-fips, localstack, dask-kubernetes, azure-functions-host, apache-beam-python-3.11-sdk, datadog-agent-fips, kubeflow-katib, mlflow, nemo, nvidia-nsight-compute-13.3, kserve, k8s-sidecar, open-webui, superse...

GHSA-2XPW-W6GG-JR37 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow, py3-cassandra-medusa, datadog-agent, superset, ggshield, py3-urllib3, dask-gateway, kubeflow-katib, py3-pipenv, kubeflow-pipelines-visualization-server, open-webui, pypy-3.11, jupyter-base-notebook, jwt-tool, py3-pip, kubeflow-pipelines,...

CVE-2025-66418 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow, py3-cassandra-medusa, datadog-agent, superset, ggshield, py3-urllib3, dask-gateway, kubeflow-katib, py3-pipenv, kubeflow-pipelines-visualization-server, open-webui, pypy-3.11, jupyter-base-notebook, jwt-tool, py3-pip, kubeflow-pipelines,...

AZL-71837 CVE-2025-66471 affecting package python-urllib3 for versions less than 2.0.7-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than...

0lever-utils (>=0.0.2 <=0.0.7), 0xdegenmo-lighter-mcp (=0.1.1) +16246 more potentially affected by CVE-2025-66471 via urllib3 (>=1.10.2 <=2.5.0)

urllib3 PYPI version =1.10.2, =0.0.2, =0.3.0, =0.0.1a0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a-texam =1.1.0 - a16z =0.0.1 and more Source cves: CVE-2025-66471 Source advisory: SNYK:PYTHON-URLLIB3-14192442...

AZL-71834 CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...

AZL-71846 CVE-2025-66418 affecting package python-urllib3 for versions less than 1.26.19-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...

Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Open Redirect / Server-Side Request Forgery (SSRF) bypass due to Python

Summary Python is used by IBM watsonx Orchestrate Developer Edition as part of image: tools-runtime-manager Vulnerability Details CVEID:CVE-2025-50182 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control...