OPENSUSE-SU-2019:2131-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 14 Sept 2019, 12:17
Last modified:04 Feb 2026, 03:29

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Sept 2019, 12:17
Published
Vulnerability first disclosed
04 Feb 2026, 03:29
Last Modified
Vulnerability information updated

Description

Security update for python-urllib3 This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663). - CVE-2018-20060: Remove Authorization header when redirecting cross-host (bsc#1119376). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•python-urllib3&distro=openSUSE Leap 15.0

    < 1.22-lp150.5.3.1

References (9)