ELSA-2020-2081: python-virtualenv security update (MODERATE)

ELSA-2020-0851: python-virtualenv security update (MODERATE)

ELSA-2020-2068: python-pip security update (MODERATE)

ELSA-2020-1916: python-pip security update (MODERATE)

ELSA-2020-0850: python-pip security update (MODERATE)

ELSA-2020-1605: python27:2.7 security, bug fix, and enhancement update (MODERATE)

Moderate: python27:2.7 security, bug fix, and enhancement update

ELSA-2019-2272: python-urllib3 security update (MODERATE)

Security update for python-urllib3

Security update for python-urllib3

Security update for python-urllib3

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

In the urllib3 library through 1.24.1 for Python, CRLF injection is po ...

Improper Neutralization of CRLF Sequences in urllib3 library for Python

Уязвимость модуля urllib3 интерпретатора языка программирования Python, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации

urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.

urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.