SUSE-SU-2025:20330-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520330-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20330-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20330-1
Upstream
Related
Published
2025-05-20T08:39:06Z
Modified
2026-03-11T07:29:43Z
Summary
Security update for python-h11, python-httpcore
Details

This update for python-h11, python-httpcore fixes the following issues:

python-h11:

  • Update 0.16.0:
    • CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)
  • 0.15.0:
    • Reject Content-Lengths >= 1 zettabyte (1 billion terabytes) early, without attempting to parse the integer (#181)

python-httpcore:

  • CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)
References

Affected packages

SUSE:Linux Micro 6.1 / python-h11

Package

Name
python-h11
Purl
pkg:rpm/suse/python-h11&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.16.0-slfo.1.1_1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "python311-h11":  "0.16.0-slfo.1.1_1.1",
            "python311-httpcore":  "0.16.3-slfo.1.1_2.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20330-1.json"

SUSE:Linux Micro 6.1 / python-httpcore

Package

Name
python-httpcore
Purl
pkg:rpm/suse/python-httpcore&distro=SUSE%20Linux%20Micro%206.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.16.3-slfo.1.1_2.1

Ecosystem specific 

{
    "binaries":  [
        {
            "python311-h11":  "0.16.0-slfo.1.1_1.1",
            "python311-httpcore":  "0.16.3-slfo.1.1_2.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20330-1.json"