Lucene search
OracleLinuxELSA-2019-2272HistoryAug 13, 2019 - 12:00 a.m.
python-urllib3 security update
2019-08-1300:00:00
linux.oracle.com
35
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
82.9%
[1.10.2-7]
- Provide python2-urllib3
- Add patch for CVE-2019-11236
Resolves: rhbz#1703360
[1.10.2-6] - Source URL switched to HTTPS protocol
- Add patch for CVE-2018-20060
Resolves: rhbz#1658471
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | python-urllib3 | < 1.10.2-7.el7 | python-urllib3-1.10.2-7.el7.src.rpm |
| oracle linux | 7 | noarch | python-urllib3 | < 1.10.2-7.el7 | python-urllib3-1.10.2-7.el7.noarch.rpm |
| oracle linux | 7 | src | python-urllib3 | < 1.10.2-7.el7 | python-urllib3-1.10.2-7.el7.src.rpm |
| oracle linux | 7 | noarch | python-urllib3 | < 1.10.2-7.el7 | python-urllib3-1.10.2-7.el7.noarch.rpm |
Related
nessus
nessus
RHEL 7 : python-urllib3 (RHSA-2019:2272)
2019-08-12 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : python-urllib3 Multiple Vulnerabilities (NS-SA-2019-0246)
2019-12-31 00:00:00
Scientific Linux Security Update : python-urllib3 on SL7.x x86_64 (20190806)
2019-08-27 00:00:00
centos
centos
python security update
2019-08-30 04:04:34
python security update
2020-03-25 19:10:05
python3 security update
2020-03-18 19:33:57
redhat
redhat
(RHSA-2019:2272) Moderate: python-urllib3 security update
2019-08-06 08:19:27
(RHSA-2020:2081) Moderate: python-virtualenv security update
2020-05-12 14:03:20
(RHSA-2020:0851) Moderate: python-virtualenv security update
2020-03-17 13:10:32
openvas
openvas
CentOS: Security Advisory for python-virtualenv (CESA-2020:0851)
2020-03-26 00:00:00
Ubuntu: Security Advisory (USN-3990-1)
2019-05-22 00:00:00
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2019-2239)
2020-01-23 00:00:00
freebsd
freebsd
urllib3 -- multiple vulnerabilities
2018-12-11 00:00:00
oraclelinux
oraclelinux
python-virtualenv security update
2020-03-18 00:00:00
python-virtualenv security update
2020-05-19 00:00:00
python-pip security update
2020-05-19 00:00:00
ubuntu
ubuntu
urllib3 vulnerabilities
2019-05-21 00:00:00
urllib3 vulnerability
2019-07-29 00:00:00
mageia
mageia
Updated python-urllib3 packages fix security vulnerability
2019-09-07 00:09:08
Updated python-urllib3 packages fix security vulnerability
2019-09-07 00:09:08
Updated python-pip packages fix security vulnerabilities
2020-01-28 14:32:54
amazon
amazon
Medium: python-virtualenv
2020-04-20 20:48:00
Low: python-urllib3
2019-05-16 21:46:00
Medium: python-urllib3
2020-06-26 22:55:00
debian
debian
[SECURITY] [DLA 2686-1] python-urllib3 security update
2021-06-15 18:34:44
[SECURITY] [DLA 1828-1] python-urllib3 security update
2019-06-20 11:32:24
[SECURITY] [DLA 3610-1] python-urllib3 security update
2023-10-08 11:06:20
suse
suse
Security update for python-urllib3 (moderate)
2019-09-14 00:00:00
Security update for python-urllib3 (moderate)
2019-09-15 00:00:00
osv
osv
python-urllib3 - security update
2021-06-15 00:00:00
PYSEC-2018-32
2018-12-11 17:29:00
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
2018-12-12 15:52:07
fedora
fedora
[SECURITY] Fedora 30 Update: python-urllib3-1.24.2-1.fc30
2019-04-27 21:35:01
[SECURITY] Fedora 29 Update: python-urllib3-1.24.2-1.fc29
2019-04-23 20:15:33
[SECURITY] Fedora 28 Update: python-urllib3-1.24.2-1.fc28
2019-04-30 01:41:11
f5
f5
K000133668 : Python urllib3 vulnerability CVE-2018-20060
2023-04-27 00:00:00
K000135001 : Python URLlib3 vulnerability CVE-2019-11236
2023-06-12 00:00:00
redhatcve
redhatcve
prion
prion
veracode
veracode
Information Disclosure
2018-12-12 03:50:22
Carriage Return Line Feed (CRLF) Injection
2019-04-16 03:25:10
Authorization HTTP Header Leakage
2023-10-16 12:50:32
github
github
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
2018-12-12 15:52:07
Improper Neutralization of CRLF Sequences in urllib3 library for Python
2022-05-13 01:09:23
Authorization Header forwarded on redirect
2023-10-15 21:30:26
cve
cve
ubuntucve
ubuntucve
debiancve
debiancve
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to CRLF injection in Python urllib3 [CVE-2019-11236]
2024-02-29 20:49:54
cbl_mariner
cbl_mariner
CVE-2019-11236 affecting package python-urllib3 1.24.2-2
2021-08-11 06:39:25
almalinux
almalinux
Moderate: python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
photon
photon
Critical Photon OS Security Update - PHSA-2021-0442
2021-10-13 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0393
2021-09-21 00:00:00
Important Photon OS Security Update - PHSA-2021-0246
2021-06-02 00:00:00
rocky
rocky
python27:2.7 security, bug fix, and enhancement update
2020-04-28 08:55:59
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
82.9%
Related for ELSA-2019-2272