SUSE-SU-2026:24125-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202624125-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24125-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:24125-1
- Upstream
- Related
- Published
- 2026-10-09T11:46:03Z
- Modified
- 2026-10-13T17:23:11Z
- Summary
- Security update for python-urllib3
- Details
-
This update for python-urllib3 fixes the following issues:
- CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908).
- CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909).
- CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202624125-1/
- https://bugzilla.suse.com/1283908
- https://bugzilla.suse.com/1283909
- https://bugzilla.suse.com/1283910
- https://www.suse.com/security/cve/CVE-2026-97687
- https://www.suse.com/security/cve/CVE-2026-97688
- https://www.suse.com/security/cve/CVE-2026-97689