shield Security update for python-urllib3

SUSE-SLE-Module-Public-Cloud-12-2019-2370

This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663). - CVE-2018-20060: Remove Authorization header when redirecting cross-host (bsc#1119376).

• Release Date
  Sep 12 2019
• References
  Bugzilla: 1132900, 1132663, 1119376, 1129071
  CVEs: CVE-2019-9740, CVE-2018-20060, CVE-2019-11236, CVE-2019-11324
• Type
  security
• Severity
  moderate

cloud_download Downloads

Public Cloud Module 12 ppc64le

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm

Public Cloud Module 12 aarch64

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm

Public Cloud Module 12 s390x

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm

Public Cloud Module 12 x86_64

• Packages
  python-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm lock src

  python3-urllib3
  HTTP library with thread-safe connection pooling, file post, and more

  1.22-3.14.1 lock rpm