SUSE-SU-2026:24217

Type: Security

Severity: Important

Published: 2026-10-09

SUSE Linux Enterprise Server 16

This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910).

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-25T10:35:18.322Z UTC

Official vendor advisory

SUSE Linux Enterprise Server 16

View source

Observed 2026-10-25T10:35:18.322Z UTC. Last updated 2026-10-22T06:27:28.738Z UTC.

Affected Packages

python313-urllib3 2.5.0-0

Interested in being alerted when there are new versions of python313-urllib3? Set up an alert.

SUSE-SU-2026:24217

Evidence and freshness

Upstream Advisory

Affected Packages