2585 matches found
Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (crlsa-2026_1239)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261239 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...
Rocky Linux 9 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_28158)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628158 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origin...
Rocky Linux 8 [CIQ] Security Update: resource-agents / resource-agents-aliyun / etc Multiple Vulnerabilities (crlsa-2024_2952)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242952 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 pycryptodome: side-channel leakage for OAEP...
Rocky Linux 10.1 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1086)
The Rocky Linux 10.1 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261086 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...
CentOS Linux 7 [TuxCare] Security Update: python3-pip Multiple Vulnerabilities (CENTOS7:CLSA-2026:1775723090)
The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1775723090 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly...
Rocky Linux 8.6 [CIQ] Security Update: python39-urllib3 Multiple Vulnerabilities (ciqsa-2026_0243)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260243 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2021-28861, CVE-2024-37891. Tenable has...
Rocky Linux 8 [CIQ] Security Update: fence-agents-aliyun / fence-agents-aliyun-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_1240)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261240 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...
Linux Distros Unpatched Vulnerability : CVE-2026-97688
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.readchunked can enter an infinite loop because the...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2024_2987)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242987 advisory. pypa-setuptools: Regular Expression Denial of Service ReDoS in packageindex.py CVE-2022-40897 python: use after free in heappushpop of heapq module...
Rocky Linux 8 [CIQ] Security Update: aardvark-dns / cockpit-podman / conmon / conmon-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2988)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242988 advisory. urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect CVE-2018-25091 golang: math/big.Rat: may cause a pani...
Rocky Linux 9 [CIQ] Security Update: python3.11-urllib3 (crlsa-2024_11238)
The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202411238 advisory. urllib3: Request body not stripped after redirect from 303 status changes request method to GET CVE-2023-45803 Tenable has extracted the preceding description bloc...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / etc Multiple Vulnerabilities (crlsa-2020_1605)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20201605 advisory. python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 python: Cookie domain check returns...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2021_4162)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214162 advisory. python-psutil: Double free because of refcount mishandling CVE-2019-18874 python-jinja2: ReDoS vulnerability in the urlize filter CVE-2020-28493 python:...
Rocky Linux 8.6 [CIQ] Security Update: python2-urllib3 Multiple Vulnerabilities (ciqsa-2026_0194)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260194 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...
Rocky Linux 8.6 [CIQ] Security Update: python39-urllib3 Multiple Vulnerabilities (ciqsa-2026_0762)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260762 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...
EUVD-2026-89007
urllib3: Chunked Deflate streaming can enter an infinite loop...
urllib3: Chunked Deflate streaming can enter an infinite loop
Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading content in chunks instead of loading the entire response body into memory at once. urllib3 can decompress response bodies according to the HTTP Content-Encoding header. When streaming a...
GHSA-GH4C-6FX4-QH6G urllib3: Chunked Deflate streaming can enter an infinite loop
Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading content in chunks instead of loading the entire response body into memory at once. urllib3 can decompress response bodies according to the HTTP Content-Encoding header. When streaming a...
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
Impact urllib3's streaming API is designed for efficiently handling large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When decoding a chunked-transfer-encoded response, this API reads each chunk's size field by buffering until...