SUSE-SU-2023:4352-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2023:4352-1

Related

Published

2023-11-02T16:53:22Z

Modified

2023-11-02T16:53:22Z

Summary

Security update for python-urllib3

Details

This update for python-urllib3 fixes the following issues:

CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377).
CVE-2018-25091: Fixed a potential leak of the Authorization header during a cross-origin redirect (bsc#1216275).
CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.23-3.25.1

{
    "binaries": [
        {
            "python-urllib3": "1.23-3.25.1"
        }
    ]
}

Name: python-urllib3
Purl: purl:rpm/suse/python-urllib3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.23-3.25.1

{
    "binaries": [
        {
            "python-urllib3": "1.23-3.25.1"
        }
    ]
}