NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 8.9
  CVE-2025-66418

  urllib3 allows an unbounded number of links in the decompression chain

  urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leadin…

  urllib3 urllib3 open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Dec 5, 2025
• High 8.9
  CVE-2025-66471

  urllib3 Streaming API improperly handles highly compressed data

  urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by readi…

  urllib3 urllib3 open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Dec 5, 2025

Revision history

1. 2026-03-23 #3

   Neue Updates von Red Hat aufgenommen

2. 2026-01-21 #2

   Neue Updates von Amazon aufgenommen

3. 2025-12-28 #1

   Initiale Fassung

References

• NetApp Security Advisory vom 2025-12-28
  https://security.netapp.com/advisory/NTAP-20251224-0008
• NetApp Security Advisory vom 2025-12-28
  https://security.netapp.com/advisory/NTAP-20251224-0009
• Amazon Linux Security Advisory ALAS2-2026-3126 vom 2026-01-22
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3126.html
• Red Hat Security Advisory RHSA-2026:5459 vom 2026-03-23
  https://access.redhat.com/errata/RHSA-2026:5459