The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-psycopg2-docUpgrade python2-ipaddressUpgrade python2-pytestUpgrade python2-psycopg2-testsUpgrade python2-attrsUpgrade python2-mockUpgrade python2-dnsUpgrade python2-rpm-macrosUpgrade python2-coverageUpgrade python2-docsUpgrade python2-CythonUpgrade python2-pysocksUpgrade python2-psycopg2-debugUpgrade python2-pytzUpgrade python2-chardetUpgrade python2-pluggyUpgrade python2-psycopg2Upgrade python2-setuptools_scmUpgrade python2-funcsigsUpgrade python2-markupsafeUpgrade python2-pyUpgrade python2-idnaUpgrade python2-pytest-mockUpgrade python2-PyMySQLUpgrade python2-docs-infoUpgrade python2-requestsUpgrade python2-pyyamlUpgrade python2-docutils | May 4, 2022 | Dec 11, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python-urllib3Upgrade python-virtualenv | Apr 27, 2020 | Dec 11, 2018 |
| Amazon_linux | — | Upgrade python-urllib3 | Jun 14, 2019 | Dec 11, 2018 |
| Centos_linux | — | Upgrade python-psycopg2-docUpgrade python2-debugsourceUpgrade python2-requestsUpgrade python2-chardetUpgrade platform-python-pipUpgrade python2-coverageUpgrade python2-markupsafeUpgrade python2-scipy-debuginfoUpgrade python2-debugUpgrade python2-idnaUpgrade python-virtualenvUpgrade python2-psycopg2-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade scipy-debugsourceUpgrade python2-wheel-wheelUpgrade python2-tkinterUpgrade python2-pyyamlUpgrade python2-mockUpgrade python2-numpy-docUpgrade python2-pygmentsUpgrade python2-pluggyUpgrade python2-backports-ssl_match_hostnameUpgrade python2-babelUpgrade Cython-debugsourceUpgrade python2-noseUpgrade python-pymongo-debuginfoUpgrade python2-rpm-macrosUpgrade babelUpgrade python2-setuptools_scmUpgrade python2-psycopg2Upgrade python-sqlalchemy-docUpgrade python-pymongo-debugsourceUpgrade python2-docsUpgrade python-psycopg2-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-lxmlUpgrade python2-setuptoolsUpgrade python2-pymongoUpgrade python2-psycopg2-testsUpgrade python2-pyUpgrade python3-pipUpgrade python2-jinja2Upgrade python2-wheelUpgrade python2Upgrade python2-virtualenvUpgrade python2-toolsUpgrade python2-urllib3Upgrade python2-develUpgrade python2-lxml-debuginfoUpgrade python2-attrsUpgrade python2-bsonUpgrade python2-libsUpgrade python2-pymongo-debuginfoUpgrade python2-PyMySQLUpgrade PyYAML-debugsourceUpgrade python2-pysocksUpgrade python2-debuginfoUpgrade python2-dnsUpgrade python2-pipUpgrade python-nose-docsUpgrade python2-setuptools-wheelUpgrade python2-backportsUpgrade python2-coverage-debuginfoUpgrade python2-sqlalchemyUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python2-testUpgrade python2-docs-infoUpgrade numpy-debugsourceUpgrade python2-docutilsUpgrade python2-pytzUpgrade python2-pip-wheelUpgrade python2-pytestUpgrade python2-bson-debuginfoUpgrade python2-scipyUpgrade python2-pytest-mockUpgrade python2-numpyUpgrade python2-sixUpgrade python2-numpy-f2pyUpgrade python2-Cython-debuginfoUpgrade python2-pymongo-gridfsUpgrade python-lxml-debugsourceUpgrade python2-ipaddressUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-psycopg2-debugUpgrade python3-pip-wheelUpgrade python-coverage-debugsourceUpgrade python2-numpy-debuginfoUpgrade python-urllib3 | Aug 28, 2019 | Dec 11, 2018 |
| Debian | — | Upgrade python-urllib3 | Jun 16, 2021 | Dec 11, 2018 |
| Freebsd | — | Upgrade py35-urllib3Upgrade py37-urllib3Upgrade py27-urllib3Upgrade py36-urllib3Upgrade py38-urllib3 | Nov 27, 2019 | Nov 26, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-urllib3 | Dec 4, 2019 | Dec 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-urllib3 | Nov 19, 2019 | Dec 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-urllib3 | Sep 12, 2019 | Dec 11, 2018 |
| Oracle Solaris | — | Upgrade library/python/urllib3-27 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-34 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-27 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-35 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-27 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-34 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-27 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-35 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-35 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-34 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-35 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-34 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4 | Jul 17, 2019 | Dec 11, 2018 |
| Oracle_linux | — | Upgrade python-psycopg2-docUpgrade python2-lxmlUpgrade python2-docsUpgrade python2-debugUpgrade python2-pluggyUpgrade python2-requestsUpgrade python2-numpy-f2pyUpgrade python2-pipUpgrade python2-psycopg2Upgrade python2-pygmentsUpgrade python2-dnsUpgrade python2-pytestUpgrade python2-backports-ssl_match_hostnameUpgrade python2-setuptoolsUpgrade python2-pymongoUpgrade python2-rpm-macrosUpgrade python2-psycopg2-testsUpgrade python2-sixUpgrade python2-mockUpgrade python2-tkinterUpgrade python-virtualenvUpgrade python2-markupsafeUpgrade python2-wheelUpgrade python2-bsonUpgrade python2-noseUpgrade python-sqlalchemy-docUpgrade python2-pyyamlUpgrade python2-wheel-wheelUpgrade python2-urllib3Upgrade platform-python-pipUpgrade python2-libsUpgrade python2-jinja2Upgrade python2Upgrade python2-funcsigsUpgrade python2-pip-wheelUpgrade python2-pymongo-gridfsUpgrade python2-virtualenvUpgrade python2-numpy-docUpgrade python2-backportsUpgrade python2-pytzUpgrade python2-idnaUpgrade python2-scipyUpgrade python2-babelUpgrade python2-chardetUpgrade python2-sqlalchemyUpgrade python2-numpyUpgrade python2-docutilsUpgrade python2-develUpgrade python-urllib3Upgrade python-nose-docsUpgrade babelUpgrade python3-pip-wheelUpgrade python2-CythonUpgrade python2-pysocksUpgrade python2-pytest-mockUpgrade python2-attrsUpgrade python2-setuptools_scmUpgrade python2-ipaddressUpgrade python2-toolsUpgrade python2-docs-infoUpgrade python2-psycopg2-debugUpgrade python3-pipUpgrade python2-pyUpgrade python2-coverageUpgrade python2-setuptools-wheelUpgrade python2-PyMySQLUpgrade python2-test | Aug 20, 2019 | Mar 26, 2018 |
| Redhat_linux | — | Upgrade python2-mockUpgrade python2-dnsUpgrade python2-psycopg2Upgrade python-pymongo-debugsourceUpgrade Cython-debugsourceUpgrade platform-python-pipUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-psycopg2-debuginfoUpgrade python2-rpm-macrosUpgrade python-psycopg2-debugsourceUpgrade python2-pipUpgrade python2-debugUpgrade python2-wheelUpgrade python2-pygmentsUpgrade numpy-debugsourceUpgrade python2-urllib3Upgrade python-lxml-debugsourceUpgrade python2-backports-ssl_match_hostnameUpgrade python2-coverage-debuginfoUpgrade python2-psycopg2-testsUpgrade python-coverage-debugsourceUpgrade python-psycopg2-docUpgrade python-psycopg2-debuginfoUpgrade python2-docsUpgrade python2-setuptools-wheelUpgrade python-nose-docsUpgrade python2-lxmlUpgrade python-pymongo-debuginfoUpgrade python2-pymongoUpgrade python2-sixUpgrade python2-numpy-f2pyUpgrade python2-testUpgrade python2-markupsafeUpgrade python2-bsonUpgrade python2-wheel-wheelUpgrade python2-pytestUpgrade python2-pyyamlUpgrade scipy-debugsourceUpgrade python2-noseUpgrade python3-pipUpgrade python2-attrsUpgrade python2-lxml-debuginfoUpgrade python2-ipaddressUpgrade python2-bson-debuginfoUpgrade python2-coverageNo solution existsUpgrade python-sqlalchemy-docUpgrade python2-debugsourceUpgrade python2-tkinterUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-babelUpgrade python2-setuptools_scmUpgrade python2-docs-infoUpgrade python2-PyMySQLUpgrade python2-pyUpgrade python2-pip-wheelUpgrade python2-requestsUpgrade python2-pytest-mockUpgrade python2-docutilsUpgrade python2-CythonUpgrade python2Upgrade python2-debuginfoUpgrade python2-numpyUpgrade python2-backportsUpgrade python2-funcsigsUpgrade python-virtualenvUpgrade python2-virtualenvUpgrade python2-idnaUpgrade python2-sqlalchemyUpgrade python2-numpy-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-libsUpgrade python2-toolsUpgrade python2-setuptoolsUpgrade python2-pymongo-gridfsUpgrade python3-pip-wheelUpgrade python2-jinja2Upgrade python2-pluggyUpgrade python2-pyyaml-debuginfoUpgrade python2-pytzUpgrade python2-chardetUpgrade babelUpgrade python2-numpy-docUpgrade python2-develUpgrade PyYAML-debugsourceUpgrade python2-pysocksUpgrade python-urllib3Upgrade python2-scipy | Aug 7, 2019 | Dec 11, 2018 |
| Rocky_linux | — | Upgrade python2-pyyaml-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-markupsafeUpgrade python2-coverage-debuginfoUpgrade python2-CythonUpgrade python2-bson-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-scipy-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-Cython-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-scipyUpgrade python2-pyyamlUpgrade python-psycopg2-debuginfoUpgrade python2-bsonUpgrade python-pymongo-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-pymongoUpgrade python-psycopg2-docUpgrade python2-psycopg2-testsUpgrade Cython-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-psycopg2Upgrade scipy-debugsourceUpgrade python2-coverage | Mar 12, 2024 | Dec 11, 2018 |
| Suse | — | Upgrade python2-urllib3Upgrade python3-urllib3Upgrade python-urllib3 | Sep 17, 2019 | Dec 11, 2018 |
| Ubuntu | — | Upgrade python3-urllib3Upgrade python-urllib3 | May 22, 2019 | Dec 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 11, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub