Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-4242

Низкий

ALT-PU-2020-4242: package python-module-httplib2 update to version 0.18.0-alt1.3

Источник
errata.altlinux.org
Дата публикации
05.11.2020
Дата обновления
05.11.2020
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades python-module-httplib2 to version 0.18.0-alt1.3.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 6.8
ubuntu
больше 6 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS3: 6.8
redhat
больше 6 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS3: 6.8
nvd
больше 6 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.

CVSS3: 6.8
debian
больше 6 лет назад

In httplib2 before version 0.18.0, an attacker controlling unescaped p ...

CVSS3: 6.8
github
больше 6 лет назад

CRLF injection in httplib2