The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python | Aug 30, 2017 | Sep 2, 2016 |
| Amazon_linux | — | Upgrade python27Upgrade python26Upgrade python34 | Jul 22, 2016 | Jul 20, 2016 |
| Centos_linux | — | Upgrade python-libsUpgrade tkinterUpgrade pythonUpgrade python-testUpgrade python-debugUpgrade python-toolsUpgrade python-devel | Aug 22, 2016 | Aug 18, 2016 |
| Debian | — | Upgrade python2.7 | Mar 31, 2017 | Jun 21, 2016 |
| Freebsd | — | Upgrade python27Upgrade python33Upgrade python35Upgrade python34 | Dec 10, 2025 | Jun 30, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-develUpgrade python-libsUpgrade python | Nov 30, 2017 | Sep 2, 2016 |
| Oracle Solaris | — | Upgrade runtime/python-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27/tests to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3 | May 29, 2017 | Sep 2, 2016 |
| Oracle_linux | — | Upgrade python-toolsUpgrade pythonUpgrade python-debugUpgrade python-libsUpgrade python-testUpgrade python-develUpgrade tkinter | Sep 2, 2016 | Nov 24, 2014 |
| Redhat_linux | — | Upgrade python-debuginfoUpgrade python-debugUpgrade python-develUpgrade python-toolsUpgrade pythonNo solution existsUpgrade python-testUpgrade tkinterUpgrade python-libs | Aug 22, 2016 | Aug 18, 2016 |
| Suse | — | Upgrade python-docUpgrade python3-baseUpgrade libpython3_4m1_0Upgrade python3-32bitUpgrade libpython3_6m1_0Upgrade python-cursesUpgrade python-xmlUpgrade python3-tkUpgrade libpython3_6m1_0-32bitUpgrade python3-testsuiteUpgrade python-x86Upgrade python-idleUpgrade pythonUpgrade python-tkUpgrade python3-idleUpgrade python-demoUpgrade python3-base-32bitUpgrade libpython2_7-1_0Upgrade python-develUpgrade python3Upgrade libpython2_6-1_0Upgrade python3-cursesUpgrade python-base-32bitUpgrade python3-toolsUpgrade libpython2_6-1_0-x86Upgrade python-baseUpgrade python-gdbmUpgrade python-doc-pdfUpgrade libpython2_7-1_0-32bitUpgrade libpython3_4m1_0-32bitUpgrade python3-dbmUpgrade python-base-x86Upgrade python3-develUpgrade python-32bitUpgrade libpython2_6-1_0-32bit | Sep 2, 2016 | Sep 2, 2016 |
| Ubuntu | — | Upgrade python3.5-minimalUpgrade libpython2.7Upgrade python3.2-minimalUpgrade python3.5Upgrade libpython3.5Upgrade libpython3.4-minimalUpgrade python3.2Upgrade libpython3.5-stdlibUpgrade libpython2.7-stdlibUpgrade libpython3.5-minimalUpgrade libpython3.2Upgrade libpython3.4-stdlibUpgrade libpython3.4Upgrade python3.4Upgrade python2.7-minimalUpgrade python2.7Upgrade python3.4-minimalUpgrade libpython2.7-minimal | Nov 23, 2016 | Sep 2, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub