Red Hat Security Advisory: Red Hat OpenStack Platform 18.0 (python-h11) security update

Fixed packages 2

Vulnerabilities 1

• Critical 9.1
  CVE-2025-43859

  h11 accepts some malformed Chunked-Encoding bodies

  h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in versio…

  python-hyper h11 kserve-storage-controller kubeflow-pipelines-visualization-server Debian Ubuntu Wolfi PyPI
  Apr 24, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2362162
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7535.json
• report
  https://access.redhat.com/security/cve/CVE-2025-43859
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-43859
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-43859
• article
  https://github.com/python-hyper/h11/commit/114803a29ce50116dc47951c690ad4892b1a36ed
• article
  https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj