Summary
[1.24.2-8]
- Security fix for CVE-2024-37891
Resolves: RHEL-45334
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-urllib3 | 0:1.24.2-8.el8_10 |
Vulnerabilities 1
-
Medium 4.4
Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3'…