Lucene search
RedHatRHSA-2020:0851HistoryMar 17, 2020 - 1:10 p.m.
(RHSA-2020:0851) Moderate: python-virtualenv security update
2020-03-1713:10:32
access.redhat.com
32
0.01 Low
EPSS
Percentile
83.8%
The virtualenv tool creates isolated Python environments. The virtualenv tool is a successor to workingenv, and an extension of virtual-python.
Security Fix(es):
-
python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060)
-
python-urllib3: CRLF injection due to not encoding the ‘\r\n’ sequence leading to possible attack on internal service (CVE-2019-11236)
-
python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | python-virtualenv | < 15.1.0-4.el7_7 | python-virtualenv-15.1.0-4.el7_7.noarch.rpm |
Related
nessus
nessus
Oracle Linux 7 : python-virtualenv (ELSA-2020-2081)
2023-09-07 00:00:00
CentOS 7 : python-virtualenv (CESA-2020:0851)
2020-03-26 00:00:00
openvas
openvas
CentOS: Security Advisory for python-virtualenv (CESA-2020:0851)
2020-03-26 00:00:00
CentOS: Security Advisory for python3-pip (CESA-2020:0850)
2020-03-26 00:00:00
Mageia: Security Advisory (MGASA-2019-0258)
2022-01-28 00:00:00
centos
centos
python security update
2020-03-25 19:10:05
python3 security update
2020-03-18 19:33:57
python security update
2019-08-30 04:04:34
redhat
redhat
(RHSA-2020:2081) Moderate: python-virtualenv security update
2020-05-12 14:03:20
(RHSA-2020:1916) Moderate: python-pip security update
2020-04-28 09:30:31
(RHSA-2020:2068) Moderate: python-pip security update
2020-05-12 14:03:16
amazon
amazon
Medium: python-virtualenv
2020-04-20 20:48:00
Low: python-requests
2019-10-21 18:01:00
Low: python-urllib3
2019-05-16 21:46:00
oraclelinux
oraclelinux
python-virtualenv security update
2020-05-19 00:00:00
python-virtualenv security update
2020-03-18 00:00:00
python-pip security update
2020-05-05 00:00:00
freebsd
freebsd
urllib3 -- multiple vulnerabilities
2018-12-11 00:00:00
www/py-requests -- Information disclosure vulnerability
2018-06-27 00:00:00
almalinux
almalinux
Moderate: python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
python-requests bug fix update
2019-11-05 20:50:57
mageia
mageia
Updated python-urllib3 packages fix security vulnerability
2019-09-07 00:09:08
Updated python-requests packages fix security vulnerability
2018-12-03 01:15:20
ubuntu
ubuntu
urllib3 vulnerabilities
2019-05-21 00:00:00
Requests vulnerability
2018-10-15 00:00:00
Requests vulnerability
2018-10-22 00:00:00
osv
osv
Moderate: python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
Moderate: python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
python-urllib3 - security update
2021-06-15 00:00:00
rocky
rocky
python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
python-requests bug fix update
2019-11-05 20:50:57
debian
debian
[SECURITY] [DLA 2686-1] python-urllib3 security update
2021-06-15 18:34:44
[SECURITY] [DLA 1828-1] python-urllib3 security update
2019-06-20 11:32:24
suse
suse
Security update for python-urllib3 (moderate)
2019-09-14 00:00:00
Security update for python-requests (moderate)
2019-07-20 00:00:00
f5
f5
K000133668 : Python urllib3 vulnerability CVE-2018-20060
2023-04-27 00:00:00
K000133652 : Python vulnerability CVE-2018-18074
2023-04-27 00:00:00
redhatcve
redhatcve
CVE-2018-20060
2021-08-22 13:20:42
CVE-2018-18074
2020-04-03 01:55:49
fedora
fedora
[SECURITY] Fedora 30 Update: python-urllib3-1.24.2-1.fc30
2019-04-27 21:35:01
[SECURITY] Fedora 27 Update: python-requests-2.20.0-1.fc27
2018-11-14 02:56:22
[SECURITY] Fedora 29 Update: python-requests-2.20.0-1.fc29
2018-11-06 22:11:30
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2018-18074
2018-10-09 00:00:00
CVE-2018-20060
2018-12-11 00:00:00
kitploit
kitploit
prion
prion
Authorization
2018-10-09 17:29:00
Authorization
2018-12-11 17:29:00
huntr
huntr
nvd
nvd
CVE-2018-18074
2018-10-09 17:29:01
CVE-2018-20060
2018-12-11 17:29:00
veracode
veracode
Information Disclosure
2018-10-10 02:26:19
Information Disclosure
2018-12-12 03:50:22
cve
cve
CVE-2018-18074
2018-10-09 17:29:01
CVE-2018-20060
2018-12-11 17:29:00
github
github
Insufficiently Protected Credentials in Requests
2018-10-29 19:06:46
Improper Neutralization of CRLF Sequences in urllib3 library for Python
2022-05-13 01:09:23
debiancve
debiancve
CVE-2018-18074
2018-10-09 17:29:01
CVE-2018-20060
2018-12-11 17:29:00
