Summary
It was discovered that urllib3 incorrectly handled cross-origin redirects
in ProxyManager. A remote attacker could possibly use this issue to obtain
sensitive information. (CVE-2026-44431)
It was discovered that urllib3 incorrectly handled decompression of
specially crafted responses. A remote attacker could possibly use this
issue to cause urllib3 to consume resources, leading to a denial of
service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-44432)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | python-urllib3 | 1.26.5-1~exp1ubuntu0.7 |
| Ubuntu · 24.04 LTS 24.04:LTS | python-urllib3 | 2.0.7-1ubuntu0.7 |
| Ubuntu · 25.10 | python-urllib3 | 2.3.0-3ubuntu0.6 |
| Ubuntu · 26.04 LTS 26.04:LTS | python-urllib3 | 2.6.3-1ubuntu1.1 |