SB2026011659 - openEuler 24.03 LTS SP3 update for python-mcp

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Uncaught exception (CVE-ID: CVE-2025-53365)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an unhandled exception when a client deliberately triggers an exception after establishing a streamable HTTP session. A remote attacker can crash the server. 

2) Uncaught exception (CVE-ID: CVE-2025-53366)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an unhandled exception when processing malformed requests. A remote attacker can send specially crafted requests to the application and perform a denial of service attack. 

Remediation

Install update from vendor's website.

References

• https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-1151