TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
RHSA-2026:1792
fence-agents security update
Released 2026-02-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) fence-agents-4.2.1-89.el8_6.20, fence-agents-all-4.2.1-89.el8_6.20, fence-agents-amt-ws-4.2.1-89.el8_6.20 +40
- Red Hat Enterprise Linux AppStream E4S (v.8.6) fence-agents-4.2.1-89.el8_6.20, fence-agents-all-4.2.1-89.el8_6.20, fence-agents-amt-ws-4.2.1-89.el8_6.20 +41
- Red Hat Enterprise Linux AppStream TUS (v.8.6) fence-agents-4.2.1-89.el8_6.20, fence-agents-all-4.2.1-89.el8_6.20, fence-agents-amt-ws-4.2.1-89.el8_6.20 +40
- Red Hat Enterprise Linux High Availability E4S (v.8.6) fence-agents-aliyun-4.2.1-89.el8_6.20, fence-agents-aws-4.2.1-89.el8_6.20, fence-agents-azure-arm-4.2.1-89.el8_6.20 +1
- Red Hat Enterprise Linux High Availability TUS (v.8.6) fence-agents-aliyun-4.2.1-89.el8_6.20, fence-agents-aws-4.2.1-89.el8_6.20, fence-agents-azure-arm-4.2.1-89.el8_6.20 +1
Fixes 2 records
TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37
urllib3 Streaming API improperly handles highly compressed data
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.