[CLSA-2026:1775723090] python-pip: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-04-09 14:43:15 UTC
Description:
- CVE-2025-66471: add decompression size limit to bundled urllib3 - CVE-2026-21441: skip decompression when draining redirect responses in bundled urllib3
Updated packages:
  • python3-pip-9.0.3-8.el7.tuxcare.els2.noarch.rpm
    sha:1181453a4ddb8dc706d70ff187ce9ba44ef550c69d460c1912c7b0242b2bc49c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.