SUSE-SU-2019:2399-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2399-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2019:2399-1
- Related
- Published
- 2019-09-18T10:53:50Z
- Modified
- 2019-09-18T10:53:50Z
- Summary
- Security update for python-urllib3
- Details
-
This update for python-urllib3 fixes the following issues:
Security issues fixed:
- CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071).
- CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663).
- CVE-2018-20060: Remove Authorization header when redirecting cross-host (bsc#1119376).
- References
-
- https://www.suse.com/support/update/announcement/2019/suse-su-20192399-1/
- https://bugzilla.suse.com/1119376
- https://bugzilla.suse.com/1129071
- https://bugzilla.suse.com/1132663
- https://www.suse.com/security/cve/CVE-2018-20060
- https://www.suse.com/security/cve/CVE-2019-11236
- https://www.suse.com/security/cve/CVE-2019-9740