urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-commonUpgrade fence-agents-sbdUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-rsaUpgrade fence-agents-amt-wsUpgrade fence-agents-ilo2Upgrade resource-agentsUpgrade fence-agents-openstackUpgrade fence-agents-cisco-ucsUpgrade fence-virtd-cpgUpgrade fence-agents-epsUpgrade python3.11-urllib3Upgrade fence-agents-awsUpgrade fence-agents-computeUpgrade fence-agents-eaton-snmpUpgrade fence-agents-nutanix-ahvUpgrade fence-virtd-multicastUpgrade fence-agents-rhevmUpgrade fence-virtd-tcpUpgrade fence-agents-kdumpUpgrade fence-agents-rsbUpgrade fence-agents-azure-armUpgrade fence-agents-virshUpgrade fence-agents-ibm-powervsUpgrade resource-agents-aliyunUpgrade fence-agents-drac5Upgrade fence-agents-ibm-vpcUpgrade fence-virtdUpgrade fence-agents-apc-snmpUpgrade fence-agents-emersonUpgrade fence-agents-apcUpgrade fence-agents-brocadeUpgrade fence-agents-gceUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-agents-mpathUpgrade resource-agents-gcpUpgrade fence-agents-allUpgrade python3.12-urllib3Upgrade fence-virtUpgrade fence-agents-kubevirtUpgrade ha-cloud-supportUpgrade fence-agents-ipmilanUpgrade fence-agents-heuristics-pingUpgrade fence-virtd-libvirtUpgrade fence-agents-aliyunUpgrade fence-agents-intelmodularUpgrade fence-agents-ilo-mpUpgrade fence-agents-zvmUpgrade fence-virtd-serialUpgrade fence-agents-ibmbladeUpgrade fence-agents-vmware-restUpgrade resource-agents-pafUpgrade fence-agents-vmware-soapUpgrade python3-urllib3Upgrade fence-agents-wtiUpgrade fence-agents-ilo-sshUpgrade fence-agents-cisco-mdsUpgrade fence-agents-redfishUpgrade fence-agents-scsiUpgrade fence-agents-ifmibUpgrade fence-agents-ipduUpgrade fence-agents-bladecenter | Jan 28, 2026 | Jan 26, 2026 |
| Alpine Linux | — | Upgrade py3-urllib3 | Jan 26, 2026 | Dec 5, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-urllib3Upgrade python3-pipUpgrade python-pip-wheelUpgrade python2-pipUpgrade python-urllib3 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade python-urllib3 | Dec 29, 2025 | Dec 29, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-urllib3 | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-urllib3 | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-urllib3 | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-urllib3 | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade fence-agents-azure-armUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-virtdUpgrade fence-agents-vmware-restUpgrade fence-agents-commonUpgrade fence-agents-rsaUpgrade fence-agents-ibm-vpcUpgrade fence-virtd-cpgUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ibm-powervsUpgrade fence-agents-kdumpUpgrade python3.12-urllib3Upgrade fence-agents-computeUpgrade fence-agents-nutanix-ahvUpgrade fence-agents-ilo2Upgrade fence-agents-wtiUpgrade fence-virtd-tcpUpgrade fence-agents-eaton-snmpUpgrade fence-agents-drac5Upgrade fence-agents-cisco-mdsUpgrade fence-agents-mpathUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-agents-rsbUpgrade fence-agents-epsUpgrade fence-virtd-serialUpgrade fence-agents-allUpgrade fence-agents-intelmodularUpgrade fence-agents-apcUpgrade fence-agents-ilo-mpUpgrade fence-agents-brocadeUpgrade python3.11-urllib3Upgrade fence-agents-ibmbladeUpgrade fence-agents-awsUpgrade python3-urllib3Upgrade fence-agents-scsiUpgrade fence-agents-amt-wsUpgrade fence-agents-virshUpgrade fence-agents-sbdUpgrade fence-agents-apc-snmpUpgrade ha-cloud-supportUpgrade fence-agents-ifmibUpgrade fence-agents-ipduUpgrade fence-agents-emersonUpgrade fence-agents-ilo-sshUpgrade fence-agents-kubevirtUpgrade fence-virtd-libvirtUpgrade fence-agents-vmware-soapUpgrade fence-agents-openstackUpgrade fence-agents-rhevmUpgrade fence-agents-ipmilanUpgrade fence-agents-heuristics-pingUpgrade fence-agents-gceUpgrade fence-virtUpgrade fence-virtd-multicastUpgrade fence-agents-aliyunUpgrade resource-agents | Jan 27, 2026 | Dec 5, 2025 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Oct 5, 2026 | Dec 5, 2025 |
| Redhat_linux | — | Upgrade fence-agents-azure-arm-debuginfoUpgrade fence-virtd-tcpUpgrade resource-agents-sap-hana-scaleoutUpgrade fence-agents-drac5Upgrade fence-agents-cisco-mdsUpgrade fence-agents-redfishUpgrade fence-agents-emersonUpgrade fence-agents-sbdUpgrade fence-agents-scsiUpgrade fence-agents-vmware-soapUpgrade fence-virtd-serial-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-allUpgrade fence-agents-ilo2Upgrade fence-agents-amt-wsUpgrade fence-agents-bladecenterUpgrade python3.12-urllib3Upgrade fence-agents-eaton-snmpUpgrade fence-agents-epsUpgrade fence-agents-virshUpgrade fence-agents-azure-armUpgrade fence-agents-zvmUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-hpbladeUpgrade fence-agents-intelmodularUpgrade fence-agents-mpathUpgrade resource-agents-sapUpgrade fence-agents-rsaUpgrade resource-agents-debugsourceUpgrade fence-agents-aliyunUpgrade fence-agents-apcUpgrade ha-cloud-supportUpgrade fence-agents-ilo-mpUpgrade fence-agents-commonUpgrade fence-agents-vmware-restUpgrade resource-agents-gcpUpgrade fence-agents-debugsourceUpgrade fence-agents-lparUpgrade fence-agents-ibmbladeUpgrade fence-agents-computeUpgrade fence-agents-kubevirtUpgrade fence-virtd-libvirt-debuginfoNo solution existsUpgrade fence-agents-rhevmUpgrade resource-agentsUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-rsbUpgrade fence-virtd-cpg-debuginfoUpgrade python-s3transferUpgrade fence-virtUpgrade fence-agents-wtiUpgrade fence-virtd-multicast-debuginfoUpgrade fence-agents-ibm-vpcUpgrade fence-agents-awsUpgrade sap-cluster-connectorUpgrade resource-agents-debuginfoUpgrade fence-agents-nutanix-ahvUpgrade fence-agents-ipduUpgrade fence-agents-ilo-sshUpgrade fence-agents-heuristics-pingUpgrade fence-agents-openstackUpgrade fence-agents-ipmilanUpgrade ha-cloud-support-debuginfoUpgrade fence-virtd-multicastUpgrade fence-agents-apc-snmpUpgrade fence-agents-aliyun-debuginfoUpgrade python3.11-urllib3Upgrade fence-virtd-serialUpgrade fence-agents-ifmibUpgrade fence-virtd-tcp-debuginfoUpgrade fence-virtd-libvirtUpgrade fence-agents-cisco-ucsUpgrade resource-agents-pafUpgrade fence-virt-debuginfoUpgrade fence-agents-kdumpUpgrade fence-agents-gceUpgrade fence-agents-brocadeUpgrade fence-virtd-cpgUpgrade fence-virtd-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-ibm-powervsUpgrade resource-agents-sap-hanaUpgrade fence-virtdUpgrade resource-agents-aliyunUpgrade python3-urllib3 | Jan 28, 2026 | Dec 5, 2025 |
| Rocky_linux | — | Upgrade resource-agentsUpgrade resource-agents-aliyunUpgrade fence-agents-aliyun-debuginfoUpgrade fence-virtd-multicastUpgrade fence-agents-awsUpgrade fence-agents-debugsourceUpgrade fence-virtd-multicast-debuginfoUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-computeUpgrade fence-agents-kdumpUpgrade fence-virtd-debuginfoUpgrade resource-agents-debuginfoUpgrade fence-virtd-cpgUpgrade ha-cloud-support-debuginfoUpgrade fence-virtUpgrade fence-virtdUpgrade resource-agents-pafUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-virtd-cpg-debuginfoUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-openstackUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-zvmUpgrade fence-virtd-serialUpgrade fence-virtd-libvirtUpgrade fence-virt-debuginfoUpgrade resource-agents-gcpUpgrade fence-agents-aliyunUpgrade fence-agents-azure-armUpgrade fence-agents-kubevirtUpgrade fence-virtd-tcpUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-gceUpgrade resource-agents-debugsourceUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-debuginfoUpgrade ha-cloud-supportUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-all | Feb 13, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade python3-urllib3Upgrade python3-pip (Ubuntu Pro)Upgrade python-pip (Ubuntu Pro)Upgrade python3-pip-whl (Ubuntu Pro)Upgrade python-pip-whl (Ubuntu Pro)Upgrade python3-urllib3 (Ubuntu Pro) | Dec 12, 2025 | Dec 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub