Summary
USN-3990-1 fixed a vulnerability in urllib3. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that urllib3 incorrectly stripped certain characters from
requests. A remote attacker could use this issue to perform CRLF injection.
(CVE-2019-11236)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | python-urllib3 | 1.7.1-1ubuntu4.1+esm1 |
Vulnerabilities 1
-
Medium 6.1
Improper Neutralization of CRLF Sequences in urllib3 library for Python
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
References
-
report
https://ubuntu.com/security/CVE-2019-11236