Description
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| urllib3 | urllib3 | < 1.26.19, >= 2.0.0, < 2.2.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-urllib3 | 2.2.3-3 | — |
| Debian 13 | python-urllib3 | 2.2.3-3 | — |
| Debian 12 | python-urllib3 | 1.26.12-1+deb12u1 | — |
| Debian 11 | python-urllib3 | 1.26.5-1~exp1+deb11u1 | DLA-3998-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | python-pip | 24.0+dfsg-1ubuntu1.1 | USN-7084-2 |
| Ubuntu 24.04 LTS | python-urllib3 | 2.0.7-1ubuntu0.1 | USN-7084-1 |
| Ubuntu 22.04 LTS | python-pip | 22.0.2+dfsg-1ubuntu0.5 | USN-7084-2 |
| Ubuntu 22.04 LTS | python-urllib3 | 1.26.5-1~exp1ubuntu0.2 | USN-7084-1 |
| Ubuntu 20.04 LTS | python-pip | 20.0.2-5ubuntu1.11 | USN-7084-2 |
| Ubuntu 20.04 LTS | python-urllib3 | 1.25.8-2ubuntu0.4 | USN-7084-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | python-pip | 9.0.1-2.3~ubuntu1.18.04.8+esm6 | USN-7084-2 |
| Ubuntu Pro 18.04 LTS | python-urllib3 | 1.22-1ubuntu0.18.04.2+esm2 | USN-7084-1 |
| Ubuntu Pro 16.04 LTS | python-pip | 8.1.1-2ubuntu0.6+esm10 | USN-7084-2 |
| Ubuntu Pro 16.04 LTS | python-urllib3 | 1.13.1-2ubuntu0.16.04.4+esm2 | USN-7084-1 |
| Ubuntu Pro 14.04 LTS | python-pip | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | fence-virt +55 | 4.10.0-62.el9_4.4 | RHSA-2024:4422 |
| RHEL 9 | python-urllib3 +1 | 1.26.5-5.el9_4.1 | RHSA-2024:6162 |
| RHEL 9 | python3.11-urllib3 | 1.26.12-2.el9_5.1 | RHSA-2024:9458 |
| RHEL 9 | python3.12-urllib3 | 1.26.18-2.el9_5.1 | RHSA-2024:9457 |
| RHEL 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | fence-agents +47 | 4.2.1-129.el8_10.4 | RHSA-2024:6309 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | podman +6 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | python-podman +1 | 4.9.0-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | python-urllib3 +1 | 1.24.2-8.el8_10 | RHSA-2024:5309 |
| RHEL 8 | python3.11-urllib3 | 1.26.12-4.el8_10 | RHSA-2024:8843 |
| RHEL 8 | python3.12-urllib3 | 1.26.19-1.el8_10 | RHSA-2024:8842 |
| RHEL 8 | resource-agents +3 | 4.9.0-54.el8_10.4 | RHSA-2024:6311 |
| RHEL 8 | runc | 1:1.1.12-4.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+22202+761b9a65 | RHSA-2024:5258 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.12.0.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | ansible-collection-redhat-satellite | 4.2.0-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | ansible-collection-redhat-satellite_operations | 3.0.0-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | ansible-lint | 5.4.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | ansible-runner +1 | 2.2.1-6.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | ansiblerole-foreman_scap_client | 0.3.0-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | ansiblerole-insights-client | 1.7.1-2.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | cjson | 1.7.17-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | createrepo_c +3 | 1.1.3-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | dynflow-utils | 1.6.3-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman +2 | 3.12.0.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman-bootloaders-redhat +1 | 202102220000-3.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image | 1:4.1.0-61.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image-service +1 | 1.0.0-4.1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman-fapolicyd +1 | 1.0.1-3.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman-installer +1 | 1:3.12.0.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | foreman-proxy +1 | 3.12.0-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | katello +3 | 4.14.0-0.1.rc2.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | katello-certs-tools | 2.10.0-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | katello-client-bootstrap | 1.7.9-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | libcomps +2 | 0.1.21-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | libsolv +1 | 1:0.7.20-6.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | mosquitto | 2.0.19-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | pulpcore-obsolete-packages | 1.2.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | pulpcore-selinux | 2.0.1-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | puppet-agent | 8.8.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | puppet-agent-oauth | 0.5.10-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | puppet-foreman_scap_client | 1.0.0-2.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | puppetlabs-stdlib | 9.4.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | puppetserver | 8.6.2-2.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-aiodns +1 | 3.0.0-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-aiofiles +1 | 22.1.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-aiohttp +1 | 3.9.4-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-aiohttp-xmlrpc +1 | 1.5.0-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-aioredis +1 | 2.0.1-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-aiosignal +1 | 1.3.1-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-ansible-builder +1 | 3.0.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-asgiref +1 | 3.6.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-async-lru +1 | 1.0.3-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-async-timeout +1 | 4.0.2-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-asyncio-throttle +1 | 1.0.2-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-attrs +1 | 21.4.0-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-backoff +1 | 2.2.1-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-bindep +1 | 2.11.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-bleach +1 | 3.3.1-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-bleach-allowlist +1 | 1.0.3-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-bracex +1 | 2.2.1-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-brotli +1 | 1.0.9-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-certifi +1 | 2022.12.7-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-cffi +1 | 1.15.1-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-chardet +1 | 5.0.0-2.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-charset-normalizer +1 | 2.1.1-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-click +1 | 8.1.3-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-click-shell +1 | 2.1-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-colorama +1 | 0.4.4-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-commonmark +1 | 0.9.1-9.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-contextlib2 +1 | 21.6.0-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-cryptography +1 | 42.0.8-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-daemon +1 | 2.3.1-3.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-dataclasses +1 | 0.8-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-dateutil +1 | 2.8.2-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-debian +1 | 0.1.44-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-defusedxml +1 | 0.7.1-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-deprecated +1 | 1.2.13-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-diff-match-patch +1 | 20200713-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-distro +1 | 1.7.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-django +1 | 4.2.16-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-django-filter +1 | 23.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-django-guid +1 | 3.3.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-django-lifecycle +1 | 1.0.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-django-readonly-field +1 | 1.1.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-djangorestframework +1 | 3.14.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-djangorestframework-queryfields +1 | 1.0.0-8.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-docutils +1 | 0.20.1-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-drf-access-policy +1 | 1.3.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-drf-nested-routers +1 | 0.93.4-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-drf-spectacular +1 | 0.26.5-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-dynaconf +1 | 3.1.12-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-ecdsa +1 | 0.18.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-enrich +1 | 1.2.6-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-et-xmlfile +1 | 1.1.0-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-flake8 +1 | 5.0.0-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-frozenlist +1 | 1.3.3-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.3-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-galaxy-importer +1 | 0.4.19-2.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-gitdb +1 | 4.0.10-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.40-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-gnupg +1 | 0.5.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-googleapis-common-protos +1 | 1.59.1-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-grpcio +1 | 1.65.4-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-gunicorn +1 | 22.0.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-importlib-metadata +1 | 6.0.1-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-inflection +2 | 0.5.1-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-iniparse +1 | 0.4-39.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-jinja2 +1 | 3.1.4-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-jq +1 | 1.6.0-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-json-stream +1 | 2.3.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-json-stream-rs-tokenizer +1 | 0.4.25-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-jsonschema +1 | 4.10.3-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-lockfile +1 | 0.12.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-lxml +1 | 4.9.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-markdown +1 | 3.4.1-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-markuppy +1 | 1.14-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-markupsafe +1 | 2.1.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-mccabe +1 | 0.7.0-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-multidict +1 | 6.0.4-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-odfpy +1 | 1.4.1-9.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-openpyxl +3 | 3.1.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_api +2 | 1.19.0-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_distro +2 | 0.40b0-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_exporter_otlp_proto_grpc +1 | 1.19.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_instrumentation | 0.40b0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_instrumentation_wsgi +1 | 0.40b0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_sdk +3 | 1.19.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-opentelemetry_util_http +1 | 0.40b0-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-packaging | 21.3-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-parsley | 1.3-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pbr | 5.8.0-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pexpect | 4.8.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pillow | 10.3.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-productmd | 1.33-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-protobuf | 4.21.6-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-psycopg | 3.1.9-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-ptyprocess | 0.7.0-2.el8sat | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible | 1:0.21.8-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp-cli +1 | 0.27.2-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp-container | 2.20.2-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp-deb | 3.2.1-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp-file | 1.15.1-2.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp-rpm | 3.26.1-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulp_manifest | 3.0.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pulpcore | 3.49.19-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pyOpenSSL | 24.1.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pycares | 4.1.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pycodestyle | 2.9.1-2.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pycparser | 2.21-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pycryptodomex | 3.20.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pyflakes | 2.5.0-2.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pygments | 2.17.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pyjwkest | 1.4.2-8.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pyjwt +1 | 2.5.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pyparsing | 3.1.1-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pyrsistent | 0.18.1-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-pytz | 2022.2.1-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-redis | 4.3.4-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-requests | 2.31.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-requirements-parser | 0.2.0-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-rhsm | 1.19.2-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-rich | 13.3.1-7.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-ruamel-yaml | 0.17.21-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-ruamel-yaml-clib | 0.2.7-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-schema | 0.7.5-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-semantic-version | 2.10.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-six | 1.16.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-smmap | 5.0.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-solv | 0.7.28-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-sqlparse | 0.5.0-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-tablib | 3.3.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-tenacity | 7.0.0-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-toml | 0.10.2-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-types-cryptography | 3.3.23.2-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-typing-extensions | 4.7.1-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-uritemplate | 4.1.1-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-url-normalize | 1.4.3-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-urllib3 | 2.2.3-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-urlman | 2.0.1-3.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-uuid6 | 2023.5.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-wcmatch | 8.3-5.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-whitenoise | 6.0.0-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-wrapt | 1.14.1-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-xlrd | 2.0.1-8.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-xlwt | 1.3.0-6.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-yarl | 1.8.2-4.el8pc | RHSA-2024:8906 |
| Red Hat Satellite Capsule 6 | python-zipp +1 | 3.20.2-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite 6 | foreman +14 | 3.12.0.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite 6 | foreman-installer +1 | 1:3.12.0.1-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite 6 | mosquitto | 2.0.19-1.el8sat | RHSA-2024:8906 |
| Red Hat Satellite 6 | python-grpcio +1 | 1.65.4-1.el8pc | RHSA-2024:8906 |
| Red Hat Satellite 6 | python-zipp +1 | 3.20.2-1.el8pc | RHSA-2024:8906 |
| RHEL 9.4 EUS | python3.11-urllib3 | 1.26.12-2.el9_4.1 | RHSA-2024:9922 |
| RHEL 9.4 EUS | python3.12-urllib3 | 1.26.18-2.el9_4.1 | RHSA-2024:9923 |
| RHEL 9.2 EUS | fence-virt +55 | 4.10.0-43.el9_2.7 | RHSA-2024:5633 |
| RHEL 9.2 EUS | python-urllib3 +1 | 1.26.5-3.el9_2.2 | RHSA-2024:6240 |
| RHEL 9.0 E4S | fence-virt +56 | 4.10.0-20.el9_0.15 | RHSA-2024:5627 |
| RHEL 9.0 E4S | python-urllib3 +1 | 1.26.5-3.el9_0.1 | RHSA-2024:6358 |
| RHEL 8.8 EUS | fence-agents +47 | 4.2.1-112.el8_8.7 | RHSA-2024:4746 |
| RHEL 8.8 EUS | python-urllib3 +1 | 1.24.2-5.el8_8.2 | RHSA-2024:5526 |
| RHEL 8.8 EUS | python3.11-urllib3 | 1.26.12-1.el8_8.1 | RHSA-2024:8035 |
| RHEL 8.8 EUS | resource-agents +3 | 4.9.0-40.el8_8.4 | RHSA-2024:4744 |
| RHEL 8.6 TUS | fence-agents +45 | 4.2.1-89.el8_6.13 | RHSA-2024:5622 |
| RHEL 8.6 TUS | python-urllib3 +1 | 1.24.2-5.el8_6.3 | RHSA-2024:5041 |
| RHEL 8.6 TUS | resource-agents +3 | 4.9.0-16.el8_6.13 | RHSA-2024:6310 |
| RHEL 8.6 E4S | fence-agents +46 | 4.2.1-89.el8_6.13 | RHSA-2024:5622 |
| RHEL 8.6 E4S | python-urllib3 +1 | 1.24.2-5.el8_6.3 | RHSA-2024:5041 |
| RHEL 8.6 E4S | resource-agents +3 | 4.9.0-16.el8_6.13 | RHSA-2024:6310 |
| RHEL 8.6 AUS | fence-agents +41 | 4.2.1-89.el8_6.13 | RHSA-2024:5622 |
| RHEL 8.6 AUS | python-urllib3 +1 | 1.24.2-5.el8_6.3 | RHSA-2024:5041 |
| RHEL 8.4 TUS | fence-agents +45 | 4.2.1-65.el8_4.17 | RHSA-2024:4730 |
| RHEL 8.4 TUS | resource-agents +2 | 4.1.1-90.el8_4.17 | RHSA-2024:6239 |
| RHEL 8.4 E4S | fence-agents +45 | 4.2.1-65.el8_4.17 | RHSA-2024:4730 |
| RHEL 8.4 E4S | resource-agents +2 | 4.1.1-90.el8_4.17 | RHSA-2024:6239 |
| RHEL 8.4 AUS | fence-agents +45 | 4.2.1-65.el8_4.17 | RHSA-2024:4730 |
| RHEL 8.4 AUS | resource-agents +2 | 4.1.1-90.el8_4.17 | RHSA-2024:6239 |
| Red Hat OpenStack 17 | python-urllib3 +1 | 1.25.10-7.el8ost | RHSA-2024:9985 |
| Red Hat Ansible Automation Platform Inside 2 | receptor +1 | 1.4.8-1.1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform Developer 2 | automation-controller +1 | 4.5.11-1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform Developer 2 | python-urllib3 +1 | 1.26.20-1.el9ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform Developer 2 | python39-urllib3 +1 | 1.26.20-1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform Developer 2 | receptor +1 | 1.4.8-1.1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | automation-controller +4 | 4.5.11-1.el8ap | RHSA-2024:7312, RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | python-django +1 | 4.2.16-1.el9ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | python-pulpcore +1 | 3.28.32-1.el9ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | python-urllib3 +1 | 1.26.20-1.el9ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | python39-django +1 | 4.2.16-1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | python39-pulpcore +1 | 3.28.32-1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | python39-urllib3 +1 | 1.26.20-1.el8ap | RHSA-2024:6765 |
| Red Hat Ansible Automation Platform 2 | receptor +1 | 1.4.8-1.1.el8ap | RHSA-2024:6765 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | fence-virt +54 | 4.10.0-62.el9_4.4.alma.1 | ALSA-2024:4422 |
| AlmaLinux 9 | python3-urllib3 | 1.26.5-5.el9_4.1 | ALSA-2024:6162 |
| AlmaLinux 9 | python3.11-urllib3 | 1.26.12-2.el9_5.1 | ALSA-2024:9458 |
| AlmaLinux 9 | python3.12-urllib3 | 1.26.18-2.el9_5.1 | ALSA-2024:9457 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:5258 |
| AlmaLinux 8 | buildah +1 | 2:1.33.8-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | crit +2 | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | fence-agents-all +46 | 4.2.1-129.el8_10.4 | ALSA-2024:6309 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:5258 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:5258 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | python3-podman | 4.9.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | python3-urllib3 | 1.24.2-8.el8_10 | ALSA-2024:5309 |
| AlmaLinux 8 | python3.11-urllib3 | 1.26.12-4.el8_10 | ALSA-2024:8843 |
| AlmaLinux 8 | python3.12-urllib3 | 1.26.19-1.el8_10 | ALSA-2024:8842 |
| AlmaLinux 8 | resource-agents +3 | 4.9.0-54.el8_10.4 | ALSA-2024:6311 |
| AlmaLinux 8 | runc | 1:1.1.12-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 | ALSA-2024:5258 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:5258 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+3858+6ad51f9f | ALSA-2024:5258 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | python3.12-urllib3 | 1.26.18-2.el9_5.1 | RLSA-2024:9457 |
| Rocky Linux 8 | fence-agents | 4.2.1-129.el8_10.4 | RLSA-2024:6309 |
| Rocky Linux 8 | python-urllib3 | 1.24.2-8.el8_10 | RLSA-2024:5309 |
| Rocky Linux 8 | python3.11-urllib3 | 1.26.12-4.el8_10 | RLSA-2024:8843 |
| Rocky Linux 8 | python3.12-urllib3 | 1.26.19-1.el8_10 | RLSA-2024:8842 |
| Rocky Linux 8 | resource-agents | 4.9.0-54.el8_10.4 | RLSA-2024:6311 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SLES 15 SP5 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SLES 15 SP4 | python-urllib3 | 2.0.7-150400.7.18.1 | SUSE-SU-2024:2320-1 |
| SLES 12 SP5 | python-urllib3 | 1.25.10-3.40.1 | SUSE-SU-2024:2879-1 |
| SLES 12 | python-urllib3 | 1.25.10-3.40.1 | SUSE-SU-2024:2879-1 |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 3 | python-urllib3 | 2.0.7-150400.7.18.1 | SUSE-SU-2024:2320-1 |
| SLES 3 | python-urllib3_1 | 1.26.18-150600.3.3.1 | SUSE-SU-2024:4358-1 |
| SLES for SAP 12 SP5 | python-urllib3 | 1.25.10-3.40.1 | SUSE-SU-2024:2879-1 |
| SLE Micro 6.0 | python-urllib3 | 2.1.0-2.1 | SUSE-SU-2025:20037-1 |
| SLE Micro 5.5 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SLE Micro 5.4 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SLE Micro 5.3 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SLE Micro 5.2 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SLE Micro 5.1 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
| SUSE Manager Server Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Proxy Module 4.3 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools for SLE Micro 5 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | venv-salt-minion | 3006.0-1.47.1 | SUSE-SU-2024:4029-1, SUSE-EL-9-CLIENT-TOOLS-2024-4029 |
| SUSE Manager Client Tools 15 | venv-salt-minion | 3006.0-150000.3.67.1 | SUSE-SU-2024:4021-1 |
| SUSE Manager Client Tools 12 | venv-salt-minion | 3006.0-3.65.1 | SUSE-SU-2024:4020-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy +1 | 3.11.9-1.26.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-cryptography | 3.3.2-1.18.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-docker | 7.0.0-1.8.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-idna | 3.4-1.9.2 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-passlib +1 | 1.7.4-1.3.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-setuptools | 67.7.2-1.12.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-urllib3 | 2.0.7-1.12.1 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | saltbundlepy-zipp | 3.15.0-1.9.2 | SUSE-SU-2024:4029-1 |
| SUSE EL-9:Update:Products:SaltBundle:Update | venv-salt-minion | 3006.0-1.47.1 | SUSE-SU-2024:4029-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | oci-cli | 3.76.2-1.1 | openSUSE-SU-2026:10539-1 |
| openSUSE Tumbleweed | python-urllib3 | 2.1.0-3.1 | openSUSE-SU-2026:12044-1, openSUSE-SU-2024:14055-1 |
| openSUSE Leap 15.6 | python-urllib3 | 2.0.7-150400.7.18.1 | SUSE-SU-2024:2320-1 |
| openSUSE Leap 15.6 | python-urllib3_1 | 1.26.18-150600.3.3.1 | SUSE-SU-2024:4358-1 |
| openSUSE Leap 15.5 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1, SUSE-SU-2024:2320-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | python-urllib3 | 1.25.10-150300.4.12.1 | SUSE-SU-2024:2662-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3-pip +1 | 21.3.1-2.amzn2023.0.8 | ALAS2023-2024-730 |
| Amazon Linux 2023 | python3-urllib3 | 1.25.10-5.amzn2023.0.4 | ALAS2023-2024-747 |
| Amazon Linux 2023 | python3.11-pip +1 | 22.3.1-2.amzn2023.0.3 | ALAS2023-2024-729 |
| Amazon Linux 2023 | python3.13-pip +1 | 24.2-259.amzn2023.0.2 | ALAS2023-2026-1412 |
| Amazon Linux 2 | python-urllib3 | 1.25.9-1.amzn2.0.4 | ALAS2-2024-2653 |
| Amazon Linux 2 | python2-pip +2 | 20.2.2-1.amzn2.0.6 | ALAS2-2024-2652 |
| Amazon Linux 2 | python3-urllib3 | 1.25.6-2.amzn2.0.4 | ALAS2-2026-3127 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-pip | 24.2-2 | — |
| Azure Linux 3 | python-urllib3 | 2.0.7-1 | — |
| Azure Linux 2 (CBL-Mariner) | python-urllib3 | 1.26.19-1 | — |
| Azure Linux 2 (CBL-Mariner) | python3 | 3.9.19-13 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | fence-virt +47 | 4.10.0-62.el9_4.4 | ELSA-2024-4422 |
| Oracle Linux 9 | python3-urllib3 | 1.26.5-5.el9_4.1 | ELSA-2024-6162 |
| Oracle Linux 9 | python3.11-urllib3 | 1.26.12-2.el9_5.1 | ELSA-2024-9458 |
| Oracle Linux 9 | python3.12-urllib3 | 1.26.18-2.el9_5.1 | ELSA-2024-9457 |
| Oracle Linux 8 | fence-agents-all +40 | 4.2.1-129.el8_10.4 | ELSA-2024-6309 |
| Oracle Linux 8 | python3-urllib3 | 1.24.2-8.el8_10 | ELSA-2024-5309 |
| Oracle Linux 8 | python3.11-urllib3 | 1.26.12-4.el8_10 | ELSA-2024-8843 |
| Oracle Linux 8 | python3.12-urllib3 | 1.26.19-1.el8_10 | ELSA-2024-8842 |
| Oracle Linux 8 | resource-agents | 4.9.0-54.el8_10.4 | ELSA-2024-6311 |
| Oracle Linux 7 | python-urllib3 | 1.10.2-7.0.1.el7 | ELSA-2024-12709 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | airflow | 2.9.2-r1 | — |
| Wolfi rolling | az +1 | 2.61.0-r1 | — |
| Wolfi rolling | checkov | 3.0.34-r1 | — |
| Wolfi rolling | confluent-docker-utils | 0.0.82-r0 | — |
| Wolfi rolling | dask-gateway +1 | 2024.1.0-r6 | — |
| Wolfi rolling | ggshield | 1.28.0-r0 | — |
| Wolfi rolling | jwt-tool | 2.2.7-r1 | — |
| Wolfi rolling | k8s-sidecar | 1.27.4-r1 | — |
| Wolfi rolling | kubeflow-jupyter-web-app | 1.8.0-r9 | — |
| Wolfi rolling | kubeflow-katib +17 | 0.18.0-r0 | — |
| Wolfi rolling | kubeflow-pipelines +11 | 2.2.0-r4 | — |
| Wolfi rolling | kubeflow-pipelines-visualization-server | 2.3.0-r1 | — |
| Wolfi rolling | kubeflow-volumes-web-app | 1.8.0-r7 | — |
| Wolfi rolling | py3-cassandra-medusa +1 | 0.23.0-r30 | — |
| Wolfi rolling | py3-pipenv +9 | 2024.4.0-r0 | — |
| Wolfi rolling | py3-urllib3 | 2.2.2-r0 | — |
| Wolfi rolling | reflex | 0.5.5-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | urllib3 | < 1.26.19 | 1.26.19 | GHSA-34jh-p97f-mpxf |
| PyPI | urllib3 | >= 2.0.0, < 2.2.2 | 2.2.2 | GHSA-34jh-p97f-mpxf |
| PyPI | urllib3 | < 1.26.19 · >= 2.0.0, < 2.2.2 | 1.26.19, 2.2.2 | PYSEC-2026-1995 |
Advisories 50
- WID-SEC-2025-0135 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 3, 2026
- ALSA-2024:6162 Moderate: python-urllib3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9458 Moderate: python3.11-urllib3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9457 Moderate: python3.12-urllib3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:4422 Moderate: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5258 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6311 Moderate: resource-agents security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8842 Moderate: python3.12-urllib3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:5309 Moderate: python-urllib3 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6309 Moderate: fence-agents security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8843 Moderate: python3.11-urllib3 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2024-1562 Red Hat Enterprise Linux: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2024:8906 Red Hat Security Advisory: Satellite 6.16.0 release Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:6309 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:6311 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:6765 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:5258 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9985 Red Hat Security Advisory: RHOSP 17.1.4 (python-urllib3) security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:9923 Red Hat Security Advisory: python3.12-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:9922 Red Hat Security Advisory: python3.11-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:9457 Red Hat Security Advisory: python3.12-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:9458 Red Hat Security Advisory: python3.11-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:8842 Red Hat Security Advisory: python3.12-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:8843 Red Hat Security Advisory: python3.11-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:8035 Red Hat Security Advisory: python3.11-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:7312 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:6358 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:6310 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:6239 Red Hat Security Advisory: resource-agents security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:6240 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:6162 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:5633 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:5627 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:5622 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:5526 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:5309 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:5041 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:4746 Red Hat Security Advisory: fence-agents update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:4744 Red Hat Security Advisory: resource-agents update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:4730 Red Hat Security Advisory: fence-agents update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2024:4422 Red Hat Security Advisory: fence-agents security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- WID-SEC-2025-0166 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- openSUSE-SU-2026:12044-1 python313-urllib3-2.8.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- WID-SEC-2024-3195 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2025-1559 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2025-0823 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2025-0148 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- SUSE-EL-9-CLIENT-TOOLS-2024-4029 Security update for SUSE Manager Salt Bundle SUSE / openSUSE Security Updates · Jul 24, 2026
- WID-SEC-2024-3054 Splunk Add-on for Amazon Web Services: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2026
- USN-7084-1 python-urllib3 vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026