TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
RHSA-2026:1803
fence-agents security update
Released 2026-02-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) fence-agents-4.2.1-65.el8_4.25, fence-agents-all-4.2.1-65.el8_4.25, fence-agents-amt-ws-4.2.1-65.el8_4.25 +39
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) fence-agents-4.2.1-65.el8_4.25, fence-agents-all-4.2.1-65.el8_4.25, fence-agents-amt-ws-4.2.1-65.el8_4.25 +36
- Red Hat Enterprise Linux High Availability AUS (v.8.4) fence-agents-aliyun-4.2.1-65.el8_4.25, fence-agents-aws-4.2.1-65.el8_4.25, fence-agents-azure-arm-4.2.1-65.el8_4.25 +1
- Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) fence-agents-aliyun-4.2.1-65.el8_4.25, fence-agents-aws-4.2.1-65.el8_4.25, fence-agents-azure-arm-4.2.1-65.el8_4.25 +1
Fixes 2 records
TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37
urllib3 Streaming API improperly handles highly compressed data
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.