OPENSUSE-SU-2026:20271-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 26 Feb 2026, 09:45
Last modified:23 Mar 2026, 04:54
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
26 Feb 2026, 09:45
Published
Vulnerability first disclosed
23 Mar 2026, 04:54
Last Modified
Vulnerability information updated
Description
Security update for python-urllib3_1 This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866). - CVE-2026-21441: excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).
Affected Systems
- opensuse•python-urllib3_1&distro=openSUSE Leap 16.0
< 1.26.20-160000.3.1