shield Security update for python-urllib3

SUSE-SLE-Module-Basesystem-15-2019-2331

This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663). - CVE-2018-20060: Remove Authorization header when redirecting cross-host (bsc#1119376).

• Release Date
  Sep 9 2019
• References
  Bugzilla: 1132900, 1132663, 1119376, 1129071
  CVEs: CVE-2019-9740, CVE-2018-20060, CVE-2019-11236, CVE-2019-11324
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15 ppc64le

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock src

  python2-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

Basesystem Module 15 s390x

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock src

  python2-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

Basesystem Module 15 aarch64

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock src

  python2-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

Basesystem Module 15 x86_64

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock src

  python2-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-6.4.1 lock rpm