[CLSA-2026:1793099355] Fix CVE(s): CVE-2026-97689
Type:
security
Severity:
Important
Release date:
2026-10-27 11:09:24 UTC
Description:
* SECURITY UPDATE: Denial of service via unbounded memory use in HTTPResponse.stream()/read_chunked() when a server sends an unterminated chunk-size line - debian/patches/CVE-2026-97689.patch: bound chunk-size and trailer line reads to 65536 bytes in src/urllib3/response.py - CVE-2026-97689
CVEs fixed:
Updated packages:
  • python3-urllib3_1.26.5-1~exp1+deb11u4+tuxcare.els1_all.deb
    sha:371b92da40a461d6a0802da5e52759c21c1420a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.