Описание
Security update for python-urllib3
This update for python-urllib3 fixes the following issue
- CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
Список пакетов
Container suse/manager/4.3/proxy-tftpd:latest
python3-urllib3-1.25.10-150300.4.27.1
Container suse/manager/5.0/x86_64/proxy-tftpd:latest
python3-urllib3-1.25.10-150300.4.27.1
Container suse/manager/5.0/x86_64/server:latest
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-HPC-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-HPC-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-HPC-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-HPC-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-HPC-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-HPC-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-Hardened-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAP-Hardened-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAPCAL
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAPCAL-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAPCAL-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-SAPCAL-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-Azure-3P
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-Azure-Basic
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-Azure-Standard
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-HPC-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-HPC-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-HPC-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-HPC-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-Azure-3P
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-Hardened-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAP-Hardened-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAPCAL-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAPCAL-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP5-SAPCAL-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Azure-3P
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Azure-Basic
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Azure-Standard
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-EC2-ECS-HVM
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-HPC-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Hardened-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Azure-3P
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-BYOS
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAP-Hardened-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAPCAL
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAPCAL-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAPCAL-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP6-SAPCAL-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-Azure-3P
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-Azure-Basic
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-Azure-Standard
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-EC2-ECS-HVM
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-HPC-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-HPC-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-HPC-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Azure-3P
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Hardened-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAP-Hardened-GCE
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAPCAL-Azure
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAPCAL-EC2
python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP7-SAPCAL-GCE
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Micro 5.3
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Micro 5.4
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Micro 5.5
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Server 15 SP6-LTSS
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python3-urllib3-1.25.10-150300.4.27.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
python3-urllib3-1.25.10-150300.4.27.1
Ссылки
- Link for SUSE-SU-2026:2119-1
- E-Mail link for SUSE-SU-2026:2119-1
- SUSE Security Ratings
- SUSE Bug 1265267
- SUSE CVE CVE-2026-44431 page
Описание
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
Затронутые продукты
Container suse/manager/4.3/proxy-tftpd:latest:python3-urllib3-1.25.10-150300.4.27.1
Container suse/manager/5.0/x86_64/proxy-tftpd:latest:python3-urllib3-1.25.10-150300.4.27.1
Container suse/manager/5.0/x86_64/server:latest:python3-urllib3-1.25.10-150300.4.27.1
Image SLES15-SP4-BYOS-Azure:python3-urllib3-1.25.10-150300.4.27.1
Ссылки
- CVE-2026-44431
- SUSE Bug 1265267