Bug 34994 - python-urllib3 new security issue CVE-2025-66471
Summary: python-urllib3 new security issue CVE-2025-66471
Status: NEW
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Python Stack Maintainers
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on: 34809
Blocks:
  Show dependency tree / graph
 
Reported: 2026-01-14 09:57 CET by Nicolas Salguero
Modified: 2026-01-14 10:04 CET (History)
4 users (show)

See Also:
Source RPM: python-urllib3-1.26.20-1.2.mga9.src.rpm
CVE: CVE-2025-66471
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2026-01-14 09:57:05 CET 
+++ This bug was initially created as a clone of Bug #34809 +++

Reference: https://www.openwall.com/lists/oss-security/2025/12/05/4
Nicolas Salguero 2026-01-14 09:57:23 CET

CVE: CVE-2025-66418, CVE-2025-66471, CVE-2026-21441 => CVE-2025-66471
Source RPM: python-urllib3-1.26.20-1.1.mga9.src.rpm => python-urllib3-1.26.20-1.2.mga9.src.rpm

Nicolas Salguero 2026-01-14 10:04:26 CET

Assignee: bugsquad => python
Note You need to log in before you can comment on or make changes to this bug.