SUSE-SU-2019:0139-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2016-9015
Published: 21 Jan 2019, 14:54
Last modified:04 Feb 2026, 03:01

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Jan 2019, 14:54
Published
Vulnerability first disclosed
04 Feb 2026, 03:01
Last Modified
Vulnerability information updated

Description

Security update for python-urllib3 This update for python-urllib3 fixes the following issues: python-urllib3 was updated to version 1.22 (fate#326733, bsc#1110422) and contains new features and lots of bugfixes: The full changelog can be found on: https://github.com/Lukasa/urllib3/blob/1.22/CHANGES.rst Security issues fixed: - CVE-2016-9015: TLS certificate validation vulnerability (bsc#1024540). (This issue did not affect our previous version 1.16.) Non security issues fixed: - bsc#1074247: Fix test suite, use correct date (gh#shazow/urllib3#1303).

Affected Systems

  • suse•python-urllib3&distro=SUSE Enterprise Storage 4

    < 1.22-3.10.1

  • suse•python-urllib3&distro=SUSE Enterprise Storage 5

    < 1.22-3.10.1

  • suse•python-urllib3&distro=SUSE Linux Enterprise Module for Public Cloud 12

    < 1.22-3.10.1

  • suse•python-urllib3&distro=SUSE Manager Server 3.1

    < 1.22-3.10.1

  • suse•python-urllib3&distro=SUSE Manager Server 3.2

    < 1.22-3.10.1

References (5)