SUSE-SU-2025:20331-1

python-h11: - Update 0.16.0: * CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872) - 0.15.0: * Reject Content-Lengths >= 1 zettabyte (1 billion terabytes) early, without attempting to parse the integer (#181)

python-httpcore: - CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)

References

Affected packages

SUSE:Linux Micro 6.0 / python-h11

Package

Name: python-h11
Purl: pkg:rpm/suse/python-h11&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.16.0-1.1

Ecosystem specific

{
    "binaries": [
        {
            "python311-h11": "0.16.0-1.1",
            "python311-httpcore": "0.16.3-7.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20331-1.json"

SUSE:Linux Micro 6.0 / python-httpcore

Package

Name: python-httpcore
Purl: pkg:rpm/suse/python-httpcore&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.16.3-7.1

Ecosystem specific

{
    "binaries": [
        {
            "python311-h11": "0.16.0-1.1",
            "python311-httpcore": "0.16.3-7.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20331-1.json"