OPENSUSE-SU-2026:20127-1
Not scored
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: Fixed excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867) - CVE-2025-66418: Fixed resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866)
Exploit probability
Not scored
Published
January 29, 2026
Required by
Not available
Last source change
March 23, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
openSUSE-SU-2026:20127-1
View original source
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: Fixed excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867) - CVE-2025-66418: Fixed resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866)
05 / REFERENCES