Description
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-urllib3 | 1.25.6-4 | — |
| Debian 13 | python-urllib3 | 1.25.6-4 | — |
| Debian 12 | python-urllib3 | 1.25.6-4 | — |
| Debian 10 | python-urllib3 | 1.24.1-1+deb10u1 | DLA-3610-1 |
| Debian 9 | python-urllib3 | 1.19.1-1+deb9u1 | DLA-2686-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | python-urllib3 | 1.9.1-3+deb8u1 | DLA-1828-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | python-urllib3 | 1.22-1ubuntu0.18.04.1 | USN-3990-1 |
| Ubuntu 16.04 LTS | python-urllib3 | 1.13.1-2ubuntu0.16.04.3 | USN-3990-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | python-urllib3 | 1.7.1-1ubuntu4.1+esm1 | USN-3990-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | Cython +1 | 0.28.1-7.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | PyYAML +1 | 3.12-16.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | babel +1 | 2.5.1-9.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | numpy +3 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | pytest +1 | 3.4.2-13.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-PyMySQL +1 | 0.8.0-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-attrs +1 | 17.4.0-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-backports +1 | 1.0-15.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-backports-ssl_match_hostname +1 | 3.5.0.1-11.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-chardet +1 | 3.0.4-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-coverage +1 | 4.5.1-4.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-dns +1 | 1.15.0-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-docs +2 | 2.7.16-2.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-docutils +1 | 0.14-12.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-funcsigs +1 | 1.0.2-13.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-idna +1 | 2.5-7.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-ipaddress +1 | 1.0.18-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-jinja2 +1 | 2.10-8.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-lxml +1 | 4.2.3-3.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-markupsafe +1 | 0.23-19.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-mock +1 | 2.0.0-13.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-nose +2 | 1.3.7-30.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pip +3 | 9.0.3-16.el8 | RHSA-2020:1916 |
| RHEL 8 | python-pluggy +1 | 0.6.0-8.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-psycopg2 +4 | 2.7.5-7.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-py +1 | 1.5.3-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pygments +1 | 2.2.0-20.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pysocks +1 | 1.6.8-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pytest-mock +1 | 1.9.0-4.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-requests +1 | 2.20.0-2.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-setuptools_scm +1 | 1.15.7-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-six +1 | 1.11.0-5.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-sqlalchemy +2 | 1.3.2-1.module+el8.1.0+2994+98e054d6 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-urllib3 +1 | 1.24.2-1.module+el8.1.0+3280+19512f10 | RHSA-2020:1605, RHSA-2019:3590, RHSA-2019:3335 |
| RHEL 8 | python-virtualenv +1 | 15.1.0-19.module+el8.1.0+3507+d69c168d | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-wheel +2 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2 +6 | 2.7.16-12.module+el8.1.0+4148+33a50073 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-bson +3 | 3.6.1-11.module+el8.1.0+3446+c3d52da3 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-pip +1 | 9.0.3-14.module+el8.1.0+3446+c3d52da3 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-rpm-macros | 3-38.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-setuptools +1 | 39.0.1-11.module+el8.1.0+3446+c3d52da3 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python3-urllib3 | 1.24.2-2.el8 | RHSA-2019:3590 |
| RHEL 8 | pytz +1 | 2017.2-12.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | scipy +1 | 1.0.0-20.module+el8.1.0+3323+7ac3e00f | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 7 | python-pip +1 | 9.0.3-7.el7_7 | RHSA-2020:2068, RHSA-2020:0850 |
| RHEL 7 | python-urllib3 | 1.10.2-7.el7 | RHSA-2019:2272 |
| RHEL 7 | python-virtualenv | 15.1.0-4.el7_7 | RHSA-2020:2081, RHSA-2020:0851 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | python-urllib3 +1 | 1.24.3-1.el7 | RHBA-2020:2804, RHBA-2020:2785 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | python2-Cython | 0.28.1-7.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-PyMySQL | 0.8.0-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-attrs | 17.4.0-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-chardet | 3.0.4-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-coverage | 4.5.1-4.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-dns | 1.15.0-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-docs +1 | 2.7.16-2.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-docutils | 0.14-12.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-funcsigs | 1.0.2-13.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-idna | 2.5-7.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-ipaddress | 1.0.18-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-markupsafe | 0.23-19.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-mock | 2.0.0-13.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pluggy | 0.6.0-8.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-psycopg2 +3 | 2.7.5-7.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-py | 1.5.3-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pysocks | 1.6.8-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pytest | 3.4.2-13.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pytest-mock | 1.9.0-4.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pytz | 2017.2-12.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pyyaml | 3.12-16.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-requests | 2.20.0-3.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605 |
| AlmaLinux 8 | python2-rpm-macros | 3-38.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-setuptools_scm | 1.15.7-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | Cython | 0.28.1-7.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | PyYAML | 3.12-16.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | babel | 2.5.1-9.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | pytest | 3.4.2-13.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-PyMySQL | 0.8.0-10.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-attrs | 17.4.0-10.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-chardet | 3.0.4-10.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-coverage | 4.5.1-4.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-dns | 1.15.0-10.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-docs | 2.7.16-2.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-docutils | 0.14-12.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-funcsigs | 1.0.2-13.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-idna | 2.5-7.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-ipaddress | 1.0.18-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-jinja2 | 2.10-8.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-lxml | 4.2.3-3.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-markupsafe | 0.23-19.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-mock | 2.0.0-13.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-nose | 1.3.7-30.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pluggy | 0.6.0-8.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-psycopg2 | 2.7.5-7.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-py | 1.5.3-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pygments | 2.2.0-20.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pymongo | 3.6.1-11.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pysocks | 1.6.8-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pytest-mock | 1.9.0-4.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-requests | 2.20.0-3.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605 |
| Rocky Linux 8 | python-setuptools_scm | 1.15.7-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-virtualenv | 15.1.0-19.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-wheel | 1:0.31.1-2.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python2-rpm-macros | 3-38.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | pytz | 2017.2-12.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | scipy | 1.0.0-20.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | python-urllib3 | 1.24-9.4.1 | SUSE-SU-2019:2332-1 |
| SLES 15 | python-urllib3 | 1.22-6.4.1 | SUSE-SU-2019:2331-1 |
| SLES 12 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
| SLES 2 | python-urllib3 | 1.24-9.4.1 | SUSE-SU-2019:2332-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 9 | crowbar-core | 6.0+git.1566321308.1de18b9a4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-ha | 6.0+git.1566406179.7549de2-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1566404979.41279a88e-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-ui | 1.3.0+git.1563181545.65360af5-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ceilometer | 11.0.2~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-cinder | 13.0.7~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-designate | 7.0.1~dev21-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat | 11.0.3~dev19-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-neutron-fwaas-ui | 1.5.1~dev6-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-neutron-lbaas-ui | 5.0.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-neutron-vpnaas-ui | 1.4.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.4~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic-python-agent | 3.3.3~dev4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-keystone | 14.1.1~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-magnum | 7.1.1~dev28-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-manila | 7.3.1~dev3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-monasca-notification | 1.14.2~dev1-6.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-monasca-persister +1 | 1.12.1~dev9-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.5~dev22-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 5.0.1~dev459-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-lbaas | 13.0.1~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.2.2~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-octavia | 3.1.2~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-tempest | 19.0.0-12.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-cinder-tempest-plugin | 0.1.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-ironicclient | 2.5.3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-keystonemiddleware | 5.2.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-monasca-tempest-plugin | 0.3.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-openstackclient | 3.16.2-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-openstacksdk | 0.17.3-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-proliantutils | 2.8.4-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-urllib3 | 1.23-3.6.1 | SUSE-SU-2019:2391-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-vmware-nsx | 13.0.1~dev146-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-vmware-nsxlib | 13.0.1~dev24-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | yast2-crowbar | 3.4.2-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.6.1 | SUSE-SU-2019:2300-1 |
| SUSE OpenStack Cloud 9 | ardana-ansible | 9.0+git.1566374020.301191f-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-barbican | 9.0+git.1566251498.be02ca4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-cinder | 9.0+git.1565678764.c3a9b9f-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-cluster | 9.0+git.1559333871.40508f7-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-cobbler | 9.0+git.1566336494.93967dd-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-db | 9.0+git.1564409964.b7e4fc3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-designate | 9.0+git.1565680593.df7a432-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-extensions-nsx | 9.0+git.1566213657.69862ab-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-glance | 9.0+git.1566375806.f0b2333-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-heat | 9.0+git.1565721273.f44b8d7-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-horizon | 9.0+git.1565891518.2a545a1-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-input-model | 9.0+git.1562848565.91e75b2-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-installer-ui | 9.0+git.1566255088.3443670-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-ironic | 9.0+git.1565721987.ddc59c8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-keystone | 9.0+git.1565891593.cad6d1a-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-logging | 9.0+git.1565761582.2dc823a-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-magnum | 9.0+git.1565762005.016032a-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-monasca | 9.0+git.1566332665.ad894c0-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-mq | 9.0+git.1565115025.148d092-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-neutron | 9.0+git.1566251310.3a1e8f9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-nova | 9.0+git.1566332515.e232568-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-octavia | 9.0+git.1566206502.6c87b41-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-opsconsole | 9.0+git.1566251377.b1caeaa-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-opsconsole-ui | 9.0+git.1555530925.206f1a8-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-osconfig | 9.0+git.1565764394.545b573-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-service | 9.0+git.1564706915.edd44c4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-ses | 9.0+git.1565962617.523149b-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-swift | 9.0+git.1565891872.73fc3c7-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-tempest | 9.0+git.1566471752.a3c5c9c-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-ceilometer | 11.0.2~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-cinder +1 | 13.0.7~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-designate +1 | 7.0.1~dev21-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-heat +1 | 11.0.3~dev19-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-neutron-fwaas-ui | 1.5.1~dev6-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-neutron-lbaas-ui | 5.0.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-neutron-vpnaas-ui | 1.4.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.4~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic-python-agent | 3.3.3~dev4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-keystone +1 | 14.1.1~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-magnum | 7.1.1~dev28-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-manila | 7.3.1~dev3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-monasca-notification | 1.14.2~dev1-6.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-monasca-persister +1 | 1.12.1~dev9-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.5~dev22-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 5.0.1~dev459-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-lbaas | 13.0.1~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-nova +1 | 18.2.2~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-octavia | 3.1.2~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-tempest | 19.0.0-12.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-ardana-configurationprocessor | 9.0+git.1566405927.c5c03d4-3.8.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-cinder-tempest-plugin | 0.1.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-ironicclient | 2.5.3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-keystonemiddleware | 5.2.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-monasca-tempest-plugin | 0.3.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-openstackclient | 3.16.2-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-openstacksdk | 0.17.3-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-proliantutils | 2.8.4-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-python-engineio | 2.0.2-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-swiftlm | 9.0+git.1541434883.e0ebe69-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-urllib3 | 1.23-3.6.1 | SUSE-SU-2019:2391-1 |
| SUSE OpenStack Cloud 9 | python-vmware-nsx | 13.0.1~dev146-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-vmware-nsxlib | 13.0.1~dev24-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev18-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev16-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.0.4~dev4-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.4~dev9-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.1.1~dev28-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.3.1~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.5~dev22-6.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.1.2~dev8-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev1-2.4.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.6.1 | SUSE-SU-2019:2300-1 |
| SUSE OpenStack Cloud 7 | python-urllib3 | 1.16-3.6.1 | SUSE-SU-2019:2399-1 |
| SUSE Manager Server 3.2 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.6.1 | SUSE-SU-2019:2300-1 |
| SUSE Enterprise Storage 5 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
| SUSE Enterprise Storage 4 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.1 | python-urllib3 +1 | 1.24-lp151.2.3.1 | openSUSE-SU-2019:2133-1 |
| openSUSE Leap 15.0 | python-urllib3 | 1.22-lp150.5.3.1 | openSUSE-SU-2019:2131-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | python-virtualenv | 15.1.0-4.amzn2 | ALAS2-2020-1413 |
| Amazon Linux 2 | python2-pip +1 | 9.0.3-1.amzn2.0.2 | ALAS2-2020-1389 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | babel +1 | 2.5.1-9.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2 +6 | 2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-Cython | 0.28.1-7.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-PyMySQL | 0.8.0-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-attrs | 17.4.0-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-backports | 1.0-15.0.1.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-backports-ssl_match_hostname | 3.5.0.1-11.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-bson +2 | 3.6.1-11.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-chardet | 3.0.4-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-coverage | 4.5.1-4.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-dns | 1.15.0-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-docs +1 | 2.7.16-2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-docutils | 0.14-12.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-funcsigs | 1.0.2-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-idna | 2.5-7.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-ipaddress | 1.0.18-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-jinja2 | 2.10-8.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-lxml | 4.2.3-3.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-markupsafe | 0.23-19.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-mock | 2.0.0-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-nose +1 | 1.3.7-30.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-numpy +2 | 1:1.14.2-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pip +1 | 9.0.3-14.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pluggy | 0.6.0-8.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-psycopg2 +3 | 2.7.5-7.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-py | 1.5.3-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pygments | 2.2.0-20.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pysocks | 1.6.8-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pytest | 3.4.2-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pytest-mock | 1.9.0-4.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pytz | 2017.2-12.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pyyaml | 3.12-16.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-requests | 2.20.0-2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-rpm-macros | 3-38.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-scipy | 1.0.0-20.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-setuptools +1 | 39.0.1-11.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-setuptools_scm | 1.15.7-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-six | 1.11.0-5.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-sqlalchemy +1 | 1.3.2-1.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-urllib3 | 1.24.2-1.0.2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-virtualenv | 15.1.0-19.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-wheel +1 | 1:0.31.1-2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python3-pip +2 | 9.0.3-16.el8 | ELSA-2020-1916 |
| Oracle Linux 7 | python-urllib3 | 1.10.2-7.el7 | ELSA-2019-2272 |
| Oracle Linux 7 | python-virtualenv | 15.1.0-4.el7_7 | ELSA-2020-2081, ELSA-2020-0851 |
| Oracle Linux 7 | python3-pip | 9.0.3-7.el7_7 | ELSA-2020-2068, ELSA-2020-0850 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | urllib3 | < 1.24.3 | 1.24.3 | GHSA-r64q-w8jr-g9qp |
Advisories 41
- ALSA-2020:1605 Moderate: python27:2.7 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2019:3335 Moderate: python27:2.7 security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-4026 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- WID-SEC-2022-0517 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2020:1605 Red Hat Security Advisory: python27:2.7 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2019:3335 Red Hat Security Advisory: python27:2.7 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2020:1916 Red Hat Security Advisory: python-pip security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-3990-1 python-urllib3 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RHSA-2020:0851 Red Hat Security Advisory: python-virtualenv security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHBA-2020:2785 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.11 packages update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHBA-2020:2804 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.28 packages update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2020:2081 Red Hat Security Advisory: python-virtualenv security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2020:0850 Red Hat Security Advisory: python-pip security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2019:2272 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2020:2068 Red Hat Security Advisory: python-pip security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2019:3590 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- DLA-3610-1 python-urllib3 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2686-1 python-urllib3 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1828-1 python-urllib3 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-3990-2 python-urllib3 vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- RLSA-2020:1605 Moderate: python27:2.7 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2019:3335 Moderate: python27:2.7 security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2019:2267-1 Security update for ardana-ansible, ardana-barbican, ardana-cinder, ardana-cluster, ardana-cobbler, ardana-db, ardana-designate, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-horizon, ardana-input-model, ardana-installer-ui, ardana-ironic, ardana-keystone, ardana-logging, ardana-magnum, ardana-monasca, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar-core SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2399-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2131-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2332-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2300-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2331-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2133-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2370-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2391-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2020-2081 Moderate: python-virtualenv security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 19, 2020
- ELSA-2020-2068 Moderate: python-pip security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 19, 2020
- ELSA-2020-1605 Moderate: python27:2.7 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 5, 2020
- ELSA-2020-1916 Moderate: python-pip security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 5, 2020
- ALAS2-2020-1413 Moderate: python-virtualenv security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 23, 2020
- ELSA-2020-0851 Moderate: python-virtualenv security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 18, 2020
- ELSA-2020-0850 Moderate: python-pip security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 18, 2020
- ALAS2-2020-1389 Moderate: python-pip security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 8, 2020
- ELSA-2019-3335 Moderate: python27:2.7 security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 14, 2019
- ELSA-2019-2272 Moderate: python-urllib3 security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 13, 2019
References
- https://github.com/urllib3/urllib3/issues/1553
- USN-3990-1 vendor-advisory
- FEDORA-2019-20bc611b61 vendor-advisory
- FEDORA-2019-fbda9f1e49 vendor-advisory
- [debian-lts-announce] 20190620 [SECURITY] [DLA 1828-1] python-urllib3 security update mailing-list
- USN-3990-2 vendor-advisory
- RHSA-2019:2272 vendor-advisory
- openSUSE-SU-2019:2131 vendor-advisory
- openSUSE-SU-2019:2133 vendor-advisory
- RHSA-2019:3590 vendor-advisory
- RHSA-2019:3335 vendor-advisory
- FEDORA-2020-6148c44137 vendor-advisory
- FEDORA-2020-d0d9ad17d8 vendor-advisory
- [debian-lts-announce] 20210615 [SECURITY] [DLA 2686-1] python-urllib3 security update mailing-list
- [debian-lts-announce] 20231008 [SECURITY] [DLA 3610-1] python-urllib3 security update mailing-list