Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: FEDORA-2025-bd59b39ab6 moderate: python-h11 malformed encoding

fedora
Calendar Grey May 11, 2025
Dist Fedora Esm H88
The recent python-h11 patch in Fedora 40 addresses CVE-2025-43859 with an incorporated fix that bolsters overall system integrity.
Backport upstream fix for CVE-2025-43859

Summary

This is a little HTTP/1.1 library written from scratch in Python, heavily

inspired by hyper-h2. It is a "bring-your-own-I/O" library; h11 contains no IO

code whatsoever. This means you can hook h11 up to your favorite network API,

and that could be anything you want: synchronous, threaded, asynchronous, or

your own implementation of RFC 6214 -- h11 will not judge you. This also means

that h11 is not immediately useful out of the box: it is a toolkit for building

programs that speak HTTP, not something that could directly replace requests or

twisted.web or whatever. But h11 makes it much easier to implement something

like requests or twisted.web.

Update Information:

Backport upstream fix for CVE-2025-43859

Topics%20covered

Topics Covered

security advisory Fedora backport fix python-h11 CVE-2025-43859 malformed encoding

Change Log

* Fri May 2 2025 Robby Callicotte - 0.14.0-7 - Backport upstream fix for CVE-2025-43859 * Sat Jan 18 2025 Fedora Release Engineering - 0.14.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jul 19 2024 Fedora Release Engineering - 0.14.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Fri Jun 7 2024 Python Maint - 0.14.0-4 - Rebuilt for Python 3.13

References


[ 1 ] Bug #2362285 - CVE-2025-43859 python-h11: h11 accepts some malformed Chunked-Encoding bodies [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2362285

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-bd59b39ab6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: python-h11
Product: Fedora 40
Version: 0.14.0
Release: 7.fc40
URL: https://github.com/python-hyper/h11
Summary: A pure-Python, bring-your-own-I/O implementation of HTTP/1.1

Topics%20covered

Topics Covered

security advisory Fedora backport fix python-h11 CVE-2025-43859 malformed encoding

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here