Lucene search
RedHatRHSA-2019:2272HistoryAug 06, 2019 - 8:19 a.m.
(RHSA-2019:2272) Moderate: python-urllib3 security update
2019-08-0608:19:27
access.redhat.com
43
0.01 Low
EPSS
Percentile
83.8%
The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.
Security Fix(es):
-
python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060)
-
python-urllib3: CRLF injection due to not encoding the ‘\r\n’ sequence leading to possible attack on internal service (CVE-2019-11236)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | python-urllib3 | < 1.10.2-7.el7 | python-urllib3-1.10.2-7.el7.noarch.rpm |
Related
oraclelinux
oraclelinux
python-urllib3 security update
2019-08-13 00:00:00
python-virtualenv security update
2020-03-18 00:00:00
python-virtualenv security update
2020-05-19 00:00:00
nessus
nessus
RHEL 7 : python-urllib3 (RHSA-2019:2272)
2019-08-12 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : python-urllib3 Multiple Vulnerabilities (NS-SA-2019-0246)
2019-12-31 00:00:00
CentOS 7 : python-urllib3 (CESA-2019:2272)
2019-08-30 00:00:00
centos
centos
python security update
2019-08-30 04:04:34
python security update
2020-03-25 19:10:05
python3 security update
2020-03-18 19:33:57
freebsd
freebsd
urllib3 -- multiple vulnerabilities
2018-12-11 00:00:00
openvas
openvas
CentOS: Security Advisory for python-virtualenv (CESA-2020:0851)
2020-03-26 00:00:00
Ubuntu: Security Advisory (USN-3990-1)
2019-05-22 00:00:00
Mageia: Security Advisory (MGASA-2019-0258)
2022-01-28 00:00:00
ubuntu
ubuntu
urllib3 vulnerabilities
2019-05-21 00:00:00
urllib3 vulnerability
2019-07-29 00:00:00
redhat
redhat
(RHSA-2020:2081) Moderate: python-virtualenv security update
2020-05-12 14:03:20
(RHSA-2020:0851) Moderate: python-virtualenv security update
2020-03-17 13:10:32
(RHSA-2020:0850) Moderate: python-pip security update
2020-03-17 13:10:26
mageia
mageia
Updated python-urllib3 packages fix security vulnerability
2019-09-07 00:09:08
Updated python-urllib3 packages fix security vulnerability
2019-09-07 00:09:08
Updated python-pip packages fix security vulnerabilities
2020-01-28 14:32:54
amazon
amazon
Medium: python-virtualenv
2020-04-20 20:48:00
Low: python-urllib3
2019-05-16 21:46:00
Low: python-urllib3
2019-06-11 22:41:00
debian
debian
[SECURITY] [DLA 2686-1] python-urllib3 security update
2021-06-15 18:34:44
[SECURITY] [DLA 1828-1] python-urllib3 security update
2019-06-20 11:32:24
[SECURITY] [DLA 3610-1] python-urllib3 security update
2023-10-08 11:06:20
suse
suse
Security update for python-urllib3 (moderate)
2019-09-14 00:00:00
osv
osv
python-urllib3 - security update
2021-06-15 00:00:00
PYSEC-2018-32
2018-12-11 17:29:00
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
2018-12-12 15:52:07
f5
f5
K000133668 : Python urllib3 vulnerability CVE-2018-20060
2023-04-27 00:00:00
K000135001 : Python URLlib3 vulnerability CVE-2019-11236
2023-06-12 00:00:00
redhatcve
redhatcve
fedora
fedora
[SECURITY] Fedora 30 Update: python-urllib3-1.24.2-1.fc30
2019-04-27 21:35:01
[SECURITY] Fedora 29 Update: python-urllib3-1.24.2-1.fc29
2019-04-23 20:15:33
[SECURITY] Fedora 28 Update: python-urllib3-1.24.2-1.fc28
2019-04-30 01:41:11
prion
prion
cvelist
cvelist
nvd
nvd
debiancve
debiancve
ubuntucve
ubuntucve
veracode
veracode
Information Disclosure
2018-12-12 03:50:22
Carriage Return Line Feed (CRLF) Injection
2019-04-16 03:25:10
Authorization HTTP Header Leakage
2023-10-16 12:50:32
cve
cve
github
github
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
2018-12-12 15:52:07
Improper Neutralization of CRLF Sequences in urllib3 library for Python
2022-05-13 01:09:23
Authorization Header forwarded on redirect
2023-10-15 21:30:26
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2019-11236 affecting package python-urllib3 1.24.2-2
2021-08-11 06:39:25
photon
photon
almalinux
almalinux
Moderate: python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
rocky
rocky
python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59