File _patchinfo of Package patchinfo.42326
<patchinfo incident="42326"> <issue tracker="bnc" id="1256017">VUL-0: CVE-2025-69223: python-aiohttp: aiohttp HTTP Parser auto_decompress feature susceptible to zip bomb</issue> <issue tracker="bnc" id="1254867">VUL-0: CVE-2025-66471: python-urllib3,python-urllib3_1,python36-urllib3: excessive resource consumption via decompression of highly compressed data in Streaming API</issue> <packager>nkrapp</packager> <rating>important</rating> <category>recommended</category> <summary>Recommended update for python-Brotli</summary> <description>This update for python-Brotli fixes the following issues: - Add max-length-decompression (bsc#1254867, bsc#1256017) </description> </patchinfo>