Skip to content
OpenAdvisories
Medium ELSA-2024-2159 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[1.26.12-2]
- Security fix for CVE-2023-43804
Resolves: RHEL-12003

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3.11-urllib3 0:1.26.12-2.el9

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-43804 Public exploit

    `Cookie` HTTP header isn't stripped on cross-origin redirects

    urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `C…

    urllib3 urllib3 python3 dask-gateway Debian Ubuntu Azure Linux Alpine Wolfi PyPI