SUSE-SU-2026:3397-1
SUSE-SU-2026:3397-1 · Security update for python-urllib3
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python-urllib3 SUSE:Linux Enterprise Module for Public Cloud 15 SP4
- Affected ranges
- ECOSYSTEM: < 2.0.7-150400.7.33.1
Update to 2.0.7-150400.7.33.1
python-urllib3 SUSE:Linux Enterprise Module for Python 3 15 SP7
- Affected ranges
- ECOSYSTEM: < 2.0.7-150400.7.33.1
Update to 2.0.7-150400.7.33.1