MGASA-2021-0055

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2021-0055.html
Import Source
https://advisories.mageia.org/MGASA-2021-0055.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0055
Related
Published
2021-01-25T15:25:52Z
Modified
2021-01-25T14:39:43Z
Summary
Updated python-urllib3 packages fix security vulnerability
Details

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (CVE-2020-26137).

References
Credits

Affected packages

Mageia:7 / python-urllib3

Package

Name
python-urllib3
Purl
pkg:rpm/mageia/python-urllib3?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.24.3-1.2.mga7

Ecosystem specific 

{
    "section": "core"
}