Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1430-1

Опубликовано: 02 мая 2025
Источник: suse-cvrf

Описание

Security update for python-h11

This update for python-h11 fixes the following issues:

  • CVE-2025-43859: leniency when parsing of line terminators in chunked-coding message bodies can lead to request smuggling. (bsc#1241872)

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python311-h11-0.14.0-150400.9.6.1
openSUSE Leap 15.6
python311-h11-0.14.0-150400.9.6.1

Ссылки

Описание

h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires the combination of buggy h11 with a buggy (reverse) proxy, fixing either component is sufficient to mitigate this issue.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-h11-0.14.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-h11-0.14.0-150400.9.6.1
Ссылки
Уязвимость SUSE-SU-2025:1430-1