Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1430-1

Опубликовано: 02 мая 2025
Источник: suse-cvrf

Описание

Security update for python-h11

This update for python-h11 fixes the following issues:

  • CVE-2025-43859: leniency when parsing of line terminators in chunked-coding message bodies can lead to request smuggling. (bsc#1241872)

Список пакетов

Container containers/lmcache-lmstack-router:0
python311-h11-0.14.0-150400.9.6.1
Container containers/lmcache-vllm-openai:0
python311-h11-0.14.0-150400.9.6.1
Container containers/open-webui-mcpo:0
python311-h11-0.14.0-150400.9.6.1
Container containers/open-webui:0
python311-h11-0.14.0-150400.9.6.1
Container containers/vllm-openai:0
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-HPC-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-SAP-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-SAP-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-SAP-Hardened
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-SAP-Hardened-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP4-SAPCAL-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-Azure-3P
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-Azure-Basic
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-Azure-Standard
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-HPC-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-HPC-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-SAP-Azure-3P
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-SAP-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-SAP-Hardened-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP5-SAPCAL-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-Azure-3P
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-Azure-Basic
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-Azure-Standard
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-HPC
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-HPC-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-HPC-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAP-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAP-Azure-3P
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAP-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAP-Hardened
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAP-Hardened-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP6-SAPCAL-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-Azure-3P
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-Azure-Basic
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-Azure-Standard
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-HPC-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-HPC-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-SAP-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-SAP-Azure-3P
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-SAP-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-SAP-Hardened-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
python311-h11-0.14.0-150400.9.6.1
Image SLES15-SP7-SAPCAL-Azure
python311-h11-0.14.0-150400.9.6.1
Image ai_15_6
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python311-h11-0.14.0-150400.9.6.1
openSUSE Leap 15.6
python311-h11-0.14.0-150400.9.6.1

Ссылки

Описание

h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires the combination of buggy h11 with a buggy (reverse) proxy, fixing either component is sufficient to mitigate this issue.

Затронутые продукты
Container containers/lmcache-lmstack-router:0:python311-h11-0.14.0-150400.9.6.1
Container containers/lmcache-vllm-openai:0:python311-h11-0.14.0-150400.9.6.1
Container containers/open-webui-mcpo:0:python311-h11-0.14.0-150400.9.6.1
Container containers/open-webui:0:python311-h11-0.14.0-150400.9.6.1
Ссылки
Уязвимость SUSE-SU-2025:1430-1