Summary
It was discovered that urllib3 incorrectly handled decompression during
HTTP redirects. An attacker could possibly use this issue to cause urllib3
to use excessive resources, causing a denial of service.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | python-urllib3 | 1.26.5-1~exp1ubuntu0.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | python-urllib3 | 2.0.7-1ubuntu0.4 |
| Ubuntu · 25.10 | python-urllib3 | 2.3.0-3ubuntu0.2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | python-urllib3 | 1.25.8-2ubuntu0.4+esm3 |
References
-
report
https://ubuntu.com/security/CVE-2026-21441