urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-CythonUpgrade python-psycopg2-docUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pluggyUpgrade python2-psycopg2Upgrade python2-pyyamlUpgrade python2-numpy-f2pyUpgrade python2-setuptools-wheelUpgrade python2-psycopg2-testsUpgrade python2-docutilsUpgrade python2-sixUpgrade python2-docsUpgrade python2-chardetUpgrade python2-coverageUpgrade python2-ipaddressUpgrade python2-idnaUpgrade python-sqlalchemy-docUpgrade python2-markupsafeUpgrade python2-pytest-mockUpgrade python2-pyUpgrade python2-numpyUpgrade python2-attrsUpgrade python2-psycopg2-debugUpgrade python2-pysocksUpgrade python2-PyMySQLUpgrade python2-pytzUpgrade python2-rpm-macrosUpgrade python2-backportsUpgrade python2-requestsUpgrade python2-funcsigsUpgrade python2-setuptoolsUpgrade python2-urllib3Upgrade python2-dnsUpgrade python2-numpy-docUpgrade python2-docs-infoUpgrade python2-pytestUpgrade python2-mockUpgrade python2-sqlalchemyUpgrade python3-urllib3Upgrade python2-setuptools_scm | May 4, 2022 | Sep 30, 2020 |
| Alpine Linux | — | Upgrade py3-urllib3 | Aug 22, 2024 | Sep 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-urllib3 | Jun 24, 2021 | Sep 30, 2020 |
| Centos_linux | — | Upgrade python-pymongo-debuginfoUpgrade python2-bson-debuginfoUpgrade python2-dnsUpgrade python-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python2-pyyamlUpgrade python2-develUpgrade python2-mockUpgrade python2-setuptools-wheelUpgrade python-nose-docsUpgrade python2-funcsigsUpgrade python3-urllib3Upgrade python2-scipy-debuginfoUpgrade python2-babelUpgrade python2-psycopg2-testsUpgrade python2-rpm-macrosUpgrade python2-lxml-debuginfoUpgrade python2-bsonUpgrade python2-CythonUpgrade python2-debugUpgrade pythonUpgrade python-lxml-debugsourceUpgrade python2-docsUpgrade python2-docutilsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-psycopg2Upgrade python2-sqlalchemyUpgrade Cython-debugsourceUpgrade babelUpgrade python2-libsUpgrade python-psycopg2-debuginfoUpgrade python2-wheelUpgrade scipy-debugsourceUpgrade python2-coverageUpgrade python2-numpy-debuginfoUpgrade python2-scipyUpgrade python2-toolsUpgrade python2-debugsourceUpgrade python-debugUpgrade python2-ipaddressUpgrade python2-noseUpgrade python-psycopg2-debugsourceUpgrade python2-pipUpgrade python2-pymongo-debuginfoUpgrade python2-pytest-mockUpgrade python2-psycopg2-debugUpgrade python-testUpgrade python2-pygmentsUpgrade python2-psycopg2-debuginfoUpgrade tkinterUpgrade python2-setuptools_scmUpgrade python2-markupsafeUpgrade python2-docs-infoUpgrade python2-backportsUpgrade python2-numpyUpgrade python2-pyUpgrade python-sqlalchemy-docUpgrade python2-tkinterUpgrade python2-pyyaml-debuginfoUpgrade python2-pytzUpgrade python2-idnaUpgrade python2-debuginfoUpgrade python2-chardetUpgrade python2-jinja2Upgrade python2Upgrade python-develUpgrade python2-lxmlUpgrade numpy-debugsourceUpgrade python2-urllib3Upgrade python2-requestsUpgrade python2-numpy-docUpgrade python2-coverage-debuginfoUpgrade python2-pytestUpgrade python2-testUpgrade python2-backports-ssl_match_hostnameUpgrade python-pymongo-debugsourceUpgrade python2-setuptoolsUpgrade python2-attrsUpgrade python-coverage-debugsourceUpgrade python2-wheel-wheelUpgrade python2-virtualenvUpgrade python-toolsUpgrade python-libsUpgrade python-psycopg2-docUpgrade PyYAML-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade python2-numpy-f2pyUpgrade python2-pip-wheelUpgrade python2-pysocksUpgrade python2-six | Jun 1, 2021 | Sep 30, 2020 |
| Debian | — | Upgrade python-urllib3 | Jun 16, 2021 | Sep 30, 2020 |
| F5 Big Ip | — | — | Dec 7, 2023 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-urllib3Upgrade python2-urllib3 | Sep 24, 2021 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-urllib3 | Sep 29, 2021 | Sep 30, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle Solaris | — | Upgrade library/python/urllib3 to version 1.25.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.28.0.1.82.1 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.9-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/urllib3-27 to version 1.25.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade library/python/tkinter-35 to version 3.5.9-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/urllib3-37 to version 1.25.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade library/python/urllib3-39 to version 1.25.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.28.0.1.82.1 on Solaris 11.4 | Mar 17, 2021 | Sep 30, 2020 |
| Oracle_linux | — | Upgrade python2-toolsUpgrade python2-tkinterUpgrade python2-lxmlUpgrade python2Upgrade python2-debugUpgrade python2-pyUpgrade python2-numpyUpgrade python2-pygmentsUpgrade python2-setuptoolsUpgrade babelUpgrade python2-docutilsUpgrade python2-testUpgrade python2-dnsUpgrade python2-libsUpgrade python2-pymongoUpgrade python2-setuptools_scmUpgrade python2-pytest-mockUpgrade python2-pluggyUpgrade python2-sqlalchemyUpgrade python2-ipaddressUpgrade python2-coverageUpgrade python2-backportsUpgrade python2-idnaUpgrade python2-scipyUpgrade python2-pytzUpgrade python2-CythonUpgrade python2-funcsigsUpgrade python2-pip-wheelUpgrade pythonUpgrade python2-virtualenvUpgrade python2-requestsUpgrade python2-pymongo-gridfsUpgrade python2-markupsafeUpgrade python2-docs-infoUpgrade python-debugUpgrade python2-PyMySQLUpgrade python3-urllib3Upgrade python2-numpy-docUpgrade python2-develUpgrade python2-bsonUpgrade python2-attrsUpgrade python-sqlalchemy-docUpgrade python2-pysocksUpgrade python2-pytestUpgrade python2-jinja2Upgrade python-toolsUpgrade python2-psycopg2Upgrade python2-wheel-wheelUpgrade python-develUpgrade python2-pipUpgrade python2-mockUpgrade python2-noseUpgrade python-libsUpgrade python2-numpy-f2pyUpgrade python2-psycopg2-testsUpgrade python2-urllib3Upgrade python2-pyyamlUpgrade python-testUpgrade python2-setuptools-wheelUpgrade python2-babelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-sixUpgrade python-nose-docsUpgrade python2-rpm-macrosUpgrade python2-chardetUpgrade python2-psycopg2-debugUpgrade python2-wheelUpgrade python2-docsUpgrade python-psycopg2-docUpgrade tkinter | May 26, 2021 | Feb 10, 2020 |
| Redhat Openshift | — | Upgrade python-urllib3 | Jan 21, 2021 | Feb 10, 2020 |
| Redhat_linux | — | Upgrade python2-pyyamlUpgrade python2-pip-wheelUpgrade python2-numpyUpgrade python2-bson-debuginfoUpgrade python2-urllib3Upgrade python2-scipy-debuginfoUpgrade python2-tkinterUpgrade python2-babelUpgrade python2-pymongo-debuginfoUpgrade python2-jinja2Upgrade python2-develNo solution existsUpgrade python-psycopg2-debuginfoUpgrade python2-scipyUpgrade python-testUpgrade python2-setuptoolsUpgrade python2-pyyaml-debuginfoUpgrade python2-pyUpgrade python2-chardetUpgrade python2-noseUpgrade python2-setuptools-wheelUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade numpy-debugsourceUpgrade python2-pymongoUpgrade python2-toolsUpgrade python2-CythonUpgrade python2-PyMySQLUpgrade python2-idnaUpgrade python2-coverage-debuginfoUpgrade tkinterUpgrade python2-pytest-mockUpgrade python-nose-docsUpgrade python2-psycopg2Upgrade python2-numpy-docUpgrade python2-sqlalchemyUpgrade python2-lxmlUpgrade python2-pluggyUpgrade python-lxml-debugsourceUpgrade python2-docutilsUpgrade python2-docs-infoUpgrade python2-backportsUpgrade python-sqlalchemy-docUpgrade python2-psycopg2-debugUpgrade python-debugUpgrade python2-wheelUpgrade python2-pytzUpgrade python2-wheel-wheelUpgrade PyYAML-debugsourceUpgrade python2-pygmentsUpgrade python2-docsUpgrade scipy-debugsourceUpgrade python2-ipaddressUpgrade python2-markupsafeUpgrade python2-coverageUpgrade python2-sixUpgrade python2-requestsUpgrade python2-psycopg2-debuginfoUpgrade python2-rpm-macrosUpgrade python-libsUpgrade python2-pysocksUpgrade python2-setuptools_scmUpgrade python2-virtualenvUpgrade python-pymongo-debugsourceUpgrade python2-pytestUpgrade python-coverage-debugsourceUpgrade python2-lxml-debuginfoUpgrade python2-debugsourceUpgrade python2-mockUpgrade python-debuginfoUpgrade python-develUpgrade python2-numpy-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-psycopg2-testsUpgrade python3-urllib3Upgrade python2-numpy-f2pyUpgrade python2-testUpgrade python2-backports-ssl_match_hostnameUpgrade python2-debugUpgrade python2-Cython-debuginfoUpgrade python2-bsonUpgrade python2Upgrade python2-attrsUpgrade python-toolsUpgrade python-psycopg2-docUpgrade babelUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade pythonUpgrade python2-funcsigsUpgrade python2-debuginfoUpgrade python2-dnsUpgrade Cython-debugsourceUpgrade python2-pip | May 21, 2021 | Sep 30, 2020 |
| Rocky_linux | — | Upgrade python2-psycopg2-debuginfoUpgrade Cython-debugsourceUpgrade python2-develUpgrade python-pymongo-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2Upgrade python2-lxmlUpgrade python-psycopg2-debuginfoUpgrade python2-coverage-debuginfoUpgrade scipy-debugsourceUpgrade numpy-debugsourceUpgrade python2-coverageUpgrade python2-pyyaml-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-scipy-debuginfoUpgrade python2-pymongoUpgrade python2-pyyamlUpgrade python2-markupsafeUpgrade python2-scipyUpgrade python2-sqlalchemyUpgrade python2-tkinterUpgrade python2-debugUpgrade python2-backportsUpgrade python2-testUpgrade python2-lxml-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-bsonUpgrade python2-pymongo-gridfsUpgrade python2-CythonUpgrade python2-numpyUpgrade python2-psycopg2-debugUpgrade python2Upgrade python2-Cython-debuginfoUpgrade python-psycopg2-docUpgrade python2-debuginfoUpgrade python2-bson-debuginfoUpgrade python2-numpy-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python-coverage-debugsourceUpgrade PyYAML-debugsourceUpgrade python-lxml-debugsourceUpgrade python2-libsUpgrade python2-debugsourceUpgrade python2-tools | Mar 12, 2024 | Sep 30, 2020 |
| Suse | — | Upgrade python2-pyasn1Upgrade python2-cryptographyUpgrade python3-trustmeUpgrade python2-botocoreUpgrade python3-urllib3-testUpgrade python2-urllib3Upgrade python3-service_identityUpgrade python3-cryptographyUpgrade python2-urllib3-testUpgrade python-pyOpenSSL-docUpgrade python2-pyOpenSSLUpgrade python3-asn1cryptoUpgrade python3-pyOpenSSLUpgrade python-urllib3Upgrade python3-urllib3Upgrade python3-pycparserUpgrade python3-botocoreUpgrade python2-cffiUpgrade python3-cffiUpgrade python2-boto3Upgrade python2-pycparserUpgrade python2-asn1cryptoUpgrade aws-cliUpgrade python3-boto3Upgrade python3-pyasn1 | Dec 15, 2020 | Sep 30, 2020 |
| Ubuntu | — | Upgrade python3-urllib3Upgrade python-urllib3 | Mar 22, 2023 | Sep 30, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub