This bug was fixed in the package python-urllib3 - 2.3.0-3ubuntu0.4
---------------
python-urllib3 (2.3.0-3ubuntu0.4) questing-security; urgency=medium
* SECURITY REGRESSION: Zstandard missing attribute after CVE-2025-66471 fix.
(LP: #2136906)
- debian/patches/CVE-2025-66471-fix2.patch: Fall back if "needs_input" is
not a zstd object attribute in src/urllib3/response.py.
-- Hlib Korzhynskyy <[email protected]> Tue, 13 Jan 2026
09:29:02 -0330
** Changed in: python-urllib3 (Ubuntu)
Status: In Progress => Fix Released
** Changed in: python-urllib3 (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2136906
Title:
python3-urllib3 in 24.04 is now incompatible with shipped
python3-zstandard
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-urllib3/+bug/2136906/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
