Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:2012-1

Опубликовано: 10 июл. 2021
Источник: suse-cvrf

Описание

Security update for python-urllib3

This update for python-urllib3 fixes the following issues:

  • CVE-2021-33503: Fixed a denial of service when the URL contained many @ characters in the authority component (bsc#1187045)

Список пакетов

openSUSE Leap 15.3
python3-urllib3-1.25.10-4.3.1

Ссылки

Описание

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

Затронутые продукты
openSUSE Leap 15.3:python3-urllib3-1.25.10-4.3.1
Ссылки