shield Security update for python-urllib3_1

SUSE-SLE-Module-Python3-15-SP7-2026-635

This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866). - CVE-2026-21441: excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).

• Release Date
  Feb 25 2026
• References
  Bugzilla: 1254867, 1254866, 1256331
  CVEs: CVE-2026-21441, CVE-2025-66418, CVE-2025-66471
• Type
  security
• Severity
  moderate

cloud_download Downloads

Python 3 Module 15.7 ppc64le

• Packages
  python-urllib3_1
  HTTP library with thread-safe connection pooling, file post, and more

  1.26.18-150600.3.6.1 lock src

  python311-urllib3_1
  HTTP library with thread-safe connection pooling, file post, and more

  1.26.18-150600.3.6.1 lock rpm

Python 3 Module 15.7 x86_64

• Packages
  python-urllib3_1
  HTTP library with thread-safe connection pooling, file post, and more

  1.26.18-150600.3.6.1 lock src

  python311-urllib3_1
  HTTP library with thread-safe connection pooling, file post, and more

  1.26.18-150600.3.6.1 lock rpm

Python 3 Module 15.7 aarch64

• Packages
  python-urllib3_1
  HTTP library with thread-safe connection pooling, file post, and more

  1.26.18-150600.3.6.1 lock src

  python311-urllib3_1
  HTTP library with thread-safe connection pooling, file post, and more

  1.26.18-150600.3.6.1 lock rpm