SUSE-SU-2025:20331-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520331-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20331-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20331-1
Upstream
Related
Published
2025-05-20T08:49:02Z
Modified
2026-03-11T07:30:37Z
Summary
Security update for python-httpcore, python-h11
Details

This update for python-httpcore, python-h11 fixes the following issues:

python-h11:

  • Update 0.16.0:
    • CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)
  • 0.15.0:
    • Reject Content-Lengths >= 1 zettabyte (1 billion terabytes) early, without attempting to parse the integer (#181)

python-httpcore:

  • CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)
References

Affected packages

SUSE:Linux Micro 6.0 / python-h11

Package

Name
python-h11
Purl
pkg:rpm/suse/python-h11&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.16.0-1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "python311-h11":  "0.16.0-1.1",
            "python311-httpcore":  "0.16.3-7.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20331-1.json"

SUSE:Linux Micro 6.0 / python-httpcore

Package

Name
python-httpcore
Purl
pkg:rpm/suse/python-httpcore&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.16.3-7.1

Ecosystem specific 

{
    "binaries":  [
        {
            "python311-h11":  "0.16.0-1.1",
            "python311-httpcore":  "0.16.3-7.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20331-1.json"