FEDORA-2026-2b6dfd7c83 — security update for mingw-python-urllib3

stable

mingw-python-urllib3-2.6.3-1.fc42

FEDORA-2026-2b6dfd7c83 created by smani 9 months ago for Fedora 42

Update to 2.6.3, fixes CVE-2025-66471, CVE-2025-21441, CVE-2025-66418.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-2b6dfd7c83

This update has been submitted for testing by smani.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been pushed to testing.

9 months ago

This update has been submitted for stable by bodhi.

9 months ago

This update has been pushed to stable.

9 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

9 months ago

approved

9 months ago

Builds

mingw-python-urllib3-2.6.3-1.fc42

BZ#2431299 CVE-2025-66471 mingw-python-urllib3: urllib3 Streaming API improperly handles highly compressed data [fedora-42]

BZ#2431302 CVE-2025-66471 mingw-python-urllib3: urllib3 Streaming API improperly handles highly compressed data [fedora-43]

BZ#2431306 CVE-2026-21441 mingw-python-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) [fedora-42]

BZ#2431309 CVE-2026-21441 mingw-python-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) [fedora-43]

BZ#2431356 CVE-2025-66418 mingw-python-urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion [fedora-42]

BZ#2431358 CVE-2025-66418 mingw-python-urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion [fedora-43]

mingw-python-urllib3-2.6.3-1.fc42

Automated Test Results

ignored