gpp_maybe Security update for python-urllib3

SUSE-SLE-Module-Basesystem-15-SP7-2026-4650

This update for python-urllib3 fixes the following issues: - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910).

• Release Date
  Oct 13 2026
• References
  Bugzilla: 1283909, 1283910
  CVEs: CVE-2026-97688, CVE-2026-97689
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock rpm

Basesystem Module 15.7 aarch64

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock rpm

Basesystem Module 15.7 x86_64

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.25.10-150300.4.33.1

  lock rpm