USN-7955-1 Unknown

USN-7955-1: urllib3 vulnerability

Canonical (Ubuntu) Released: January 12, 2026 Updated: January 15, 2026 Restart Required

Description

It was discovered that urllib3 incorrectly handled decompression during HTTP redirects. An attacker could possibly use this issue to cause urllib3 to use excessive resources, causing a denial of service.

Fixed Vulnerabilities 1

CVE-2026-21441 N/A 0.0 ⚠️ KEV fixed
Jan 07, 2026

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content…

Quick Info

Patch ID: USN-7955-1
Vendor: Canonical (Ubuntu)
Severity: Unknown
CVEs Fixed: 1
Restart: Required

Additional Info

action:
usn id: USN-7955-1
summary: urllib3 could be made to use excessive resources if it received specially crafted network traffic.
usn number: 7955-1
instructions: In general, a standard system update will make all the necessary changes.

Share