SUSE-SU-2026:4704

Type: Security

Severity: Important

Published: 2026-10-16

SUSE Linux Enterprise Server 15 SP5

SUSE Linux Enterprise Server 15 SP7

SUSE Linux Enterprise Server 15 SP6

This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910).

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-25T05:09:54.955Z UTC

Official vendor advisory

SUSE Linux Enterprise Server 15 SP5

View source

Affected Packages

python311-urllib3 2.0.7-0

Interested in being alerted when there are new versions of python311-urllib3? Set up an alert.

SUSE-SU-2026:4704

Evidence and freshness

Upstream Advisory

Affected Packages