SUSE-SU-2026:2486-1

Опубликовано: 22 июн. 2026

Источник: suse-cvrf

Описание

Security update for python-urllib3

This update for python-urllib3 fixes the following issue

CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).

Список пакетов

Image SLES15-SP4-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-CHOST-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-CHOST-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-CHOST-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-HPC-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-HPC-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-HPC-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-HPC-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-Hardened-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-Hardened-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-Hardened-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-Hardened

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-Hardened-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-Hardened-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAPCAL

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAPCAL-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-SAPCAL-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-HPC-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-HPC-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-HPC-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-Micro-5-5

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-Micro-5-5-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-Micro-5-5-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-Micro-5-5-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-SAPCAL-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP5-SAPCAL-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-HPC

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-HPC-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-HPC-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-HPC-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-HPC-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-HPC-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-SAP-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-SAP-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-SAP-Hardened-BYOS

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP6-SAP-Hardened-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-Azure-3P

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-Azure-Basic

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-Azure-Standard

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-BYOS-GCE

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-CHOST-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-CHOST-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-CHOST-BYOS-GDC

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-EC2-ECS-HVM

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-HPC-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-HPC-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-HPC-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-HPC-BYOS-GCE

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-Hardened-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-Hardened-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-Hardened-BYOS-GCE

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-Azure-3P

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-BYOS-GCE

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-Hardened-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAPCAL-Azure

python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP7-SAPCAL-EC2

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Module for Public Cloud 15 SP4

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Module for Python 3 15 SP7

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Server 15 SP4-LTSS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Server 15 SP5-LTSS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Server 15 SP6-LTSS

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

python311-urllib3-2.0.7-150400.7.30.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

python311-urllib3-2.0.7-150400.7.30.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262486-1/
Link for SUSE-SU-2026:2486-1
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026853.html
E-Mail link for SUSE-SU-2026:2486-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1265267
SUSE Bug 1265267
https://www.suse.com/security/cve/CVE-2026-44431/
SUSE CVE CVE-2026-44431 page

Описание

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-BYOS-EC2:python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-BYOS:python311-urllib3-2.0.7-150400.7.30.1

Image SLES15-SP4-CHOST-BYOS-Aliyun:python311-urllib3-2.0.7-150400.7.30.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-44431.html
CVE-2026-44431
https://bugzilla.suse.com/1265267
SUSE Bug 1265267