[CLSA-2026:1792190935] python3.11-pip: Fix of CVE-2025-66418
Type:
security
Severity:
Important
Release date:
2026-10-16 22:49:05 UTC
Description:
- CVE-2025-66418: limit the Content-Encoding decompression chain to 5 links in bundled urllib3 - CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3
CVEs fixed:
Updated packages:
  • python3.11-pip-22.3.1-6.el9.tuxcare.els2.noarch.rpm
    sha:832d6c35dd9191514a48db65e8d3845bff4fb340ecc311416a8a86a660aef524
  • python3.11-pip-wheel-22.3.1-6.el9.tuxcare.els2.noarch.rpm
    sha:7747d0406f9e5f0dcc2cb3e3f773e46c79c4167422367a2235ba27a3ecf9b4de
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.