Ubuntu
python-urllib3 package

python-urllib3 1.22-1ubuntu0.18.10.1 source package in Ubuntu

Changelog

python-urllib3 (1.22-1ubuntu0.18.10.1) cosmic-security; urgency=medium

  * SECURITY UPDATE: credential disclosure via cross-origin redirect
    - debian/patches/CVE-2018-20060-*.patch: backport logic to strip
      Authorization header when following a cross-origin redirect.
    - CVE-2018-20060
  * SECURITY UPDATE: CRLF injection issue
    - debian/patches/CVE-2019-11236-1.patch: check for control chars in URL
      in urllib3/connection.py, urllib3/connectionpool.py,
      urllib3/contrib/pyopenssl.py, urllib3/contrib/socks.py,
      urllib3/util/url.py, test/test_util.py.
    - debian/patches/CVE-2019-11236-2.patch: percent-encode invalid target
      characters in urllib3/util/url.py, test/test_util.py.
    - debian/patches/CVE-2019-11236-3.patch: don't use embedded python-six
      in urllib3/util/url.py.
    - CVE-2019-11236
  * SECURITY UPDATE: CA cert mishandling
    - debian/patches/CVE-2019-11324.patch: don't load system certificates
      by default when any other CA cert parameters are specified in
      urllib3/util/ssl_.py.
    - CVE-2019-11324
  * debian/patches/fix_cert_error.patch: fix failing test.

 -- Marc Deslauriers <email address hidden>  Mon, 13 May 2019 14:27:58 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Cosmic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-urllib3_1.22.orig.tar.gz 220.8 KiB cc44da8e1145637334317feebd728bd869a35285b93cbb4cca2577da7e62db4f
python-urllib3_1.22.orig.tar.gz.asc 801 bytes b80e563a665dd9d3a3d4caabc0b4436227ff7b2631ab8b7e616ad953818d898c
python-urllib3_1.22-1ubuntu0.18.10.1.debian.tar.xz 34.1 KiB 3967f98656976e8db56f2f5c7bc8f2ec851d99400f9b9f98e8199139e4b9de1d
python-urllib3_1.22-1ubuntu0.18.10.1.dsc 2.8 KiB a6da5dde940b95b7713094c4290f123ed237f985c5b3a7dd7d9234374bfac84b

View changes file

Binary packages built by this source

python-urllib3: No summary available for python-urllib3 in ubuntu cosmic.

No description available for python-urllib3 in ubuntu cosmic.

python3-urllib3: No summary available for python3-urllib3 in ubuntu cosmic.

No description available for python3-urllib3 in ubuntu cosmic.