Lucene search

K
mageiaGentoo FoundationMGASA-2021-0055
HistoryJan 25, 2021 - 6:25 p.m.

Updated python-urllib3 packages fix security vulnerability

2021-01-2518:25:52
Gentoo Foundation
advisories.mageia.org
56

0.004 Low

EPSS

Percentile

74.4%

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (CVE-2020-26137).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchpython-urllib3< 1.24.3-1.2python-urllib3-1.24.3-1.2.mga7