An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-psycopg2-docUpgrade python2-dnsUpgrade python2-markupsafeUpgrade python2-ipaddressUpgrade python2-rpm-macrosUpgrade python2-docutilsUpgrade python2-pytestUpgrade python2-pytzUpgrade python2-CythonUpgrade python2-mockUpgrade python2-psycopg2-debugUpgrade python2-attrsUpgrade python2-funcsigsUpgrade python2-docs-infoUpgrade python2-pyUpgrade python2-pysocksUpgrade python2-idnaUpgrade python2-coverageUpgrade python2-PyMySQLUpgrade python2-chardetUpgrade python2-setuptools_scmUpgrade python2-pytest-mockUpgrade python2-psycopg2-testsUpgrade python2-docsUpgrade python2-pluggyUpgrade python2-psycopg2Upgrade python2-pyyaml | May 4, 2022 | Mar 13, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python3-debuginfoUpgrade python3-tkinterUpgrade python3-toolsUpgrade python3-develUpgrade python3-libsUpgrade python3-testUpgrade python3Upgrade python3-debug | Apr 27, 2020 | Mar 13, 2019 |
| Amazon_linux | — | Upgrade python35Upgrade python36Upgrade python27Upgrade python34 | Jun 30, 2019 | Mar 12, 2019 |
| Centos_linux | — | Upgrade python2-setuptools_scmUpgrade python2-numpy-f2pyUpgrade python2-testUpgrade platform-pythonUpgrade python2-numpyUpgrade python2-psycopg2-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-pyUpgrade python3-testUpgrade python2-attrsUpgrade python-sqlalchemy-docUpgrade python2-pymongo-debuginfoUpgrade python-psycopg2-docUpgrade python2-scipy-debuginfoUpgrade python-libsUpgrade python2-numpy-docUpgrade python-coverage-debugsourceUpgrade python2-chardetUpgrade python2-lxmlUpgrade python-testUpgrade python2Upgrade PyYAML-debugsourceUpgrade python2-backportsUpgrade python2-docs-infoUpgrade python2-coverage-debuginfoUpgrade python2-urllib3Upgrade python-develUpgrade python2-idnaUpgrade python2-pygmentsUpgrade tkinterUpgrade python2-debuginfoUpgrade python2-markupsafeUpgrade python2-pip-wheelUpgrade python2-requestsUpgrade python2-jinja2Upgrade python2-sixUpgrade python2-psycopg2-debugUpgrade python2-lxml-debuginfoUpgrade python-toolsUpgrade python2-pysocksUpgrade python2-pytzUpgrade python2-pyyaml-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-tkinterUpgrade numpy-debugsourceUpgrade python2-wheel-wheelUpgrade python2-Cython-debuginfoUpgrade python2-sqlalchemyUpgrade platform-python-debugUpgrade python2-funcsigsUpgrade python3-libsUpgrade python2-toolsUpgrade python2-psycopg2-testsUpgrade python3-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-pluggyUpgrade Cython-debugsourceUpgrade pythonUpgrade python2-rpm-macrosUpgrade python2-CythonUpgrade python2-pytest-mockUpgrade python2-noseUpgrade python2-setuptools-wheelUpgrade python3-debugsourceUpgrade python2-bsonUpgrade python2-pyyamlUpgrade python3-idleUpgrade python2-mockUpgrade python2-libsUpgrade python2-psycopg2-debug-debuginfoUpgrade platform-python-develUpgrade python-psycopg2-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-develUpgrade python2-debugUpgrade python2-pymongoUpgrade python-debugUpgrade python2-PyMySQLUpgrade scipy-debugsourceUpgrade python-debuginfoUpgrade python-pymongo-debuginfoUpgrade python3-tkinterUpgrade python2-bson-debuginfoUpgrade python2-psycopg2Upgrade python2-virtualenvUpgrade python2-pytestUpgrade python2-docutilsUpgrade python2-ipaddressUpgrade python2-wheelUpgrade python2-scipyUpgrade python2-debugsourceUpgrade python2-babelUpgrade babelUpgrade python2-dnsUpgrade python-nose-docsUpgrade python-psycopg2-debugsourceUpgrade python2-coverageUpgrade python2-backports-ssl_match_hostnameUpgrade python2-setuptoolsUpgrade python2-pipUpgrade python2-docs | Aug 28, 2019 | Mar 13, 2019 |
| Debian | — | Upgrade python2.7 | Jun 26, 2019 | Mar 13, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 21, 2025 |
| Freebsd | — | Upgrade python37Upgrade python36 | Jul 12, 2019 | Jul 12, 2019 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Mar 16, 2020 | Mar 13, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-urllib3 | Dec 4, 2019 | Mar 13, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-develUpgrade pythonUpgrade python-libsUpgrade tkinter | Nov 19, 2019 | Mar 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade pythonUpgrade python-libsUpgrade tkinter | Nov 19, 2019 | Mar 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3Upgrade python3-libsUpgrade python3-test | Jun 27, 2019 | Mar 13, 2019 |
| Oracle Solaris | — | Upgrade runtime/python-34 to version 3.4.10-0.175.3.36.0.26.0 on Solaris 11.3Upgrade library/python/tkinter-37 to version 3.7.4-11.4.12.0.1.3.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.16-0.175.3.36.0.26.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.10-11.4.12.0.1.3.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.16-11.4.12.0.1.3.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.16-11.4.12.0.1.3.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.16-11.4.12.0.1.3.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.16-0.175.3.36.0.26.0 on Solaris 11.3Upgrade runtime/python-37 to version 3.7.4-11.4.12.0.1.3.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.10-11.4.12.0.1.3.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.16-0.175.3.36.0.26.0 on Solaris 11.3Upgrade library/python/tkinter-35 to version 3.5.7-11.4.12.0.1.3.0 on Solaris 11.4Upgrade text/gnu-gettext to version 0.20.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.7-11.4.12.0.1.3.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.10-0.175.3.36.0.26.0 on Solaris 11.3 | Aug 21, 2019 | Mar 13, 2019 |
| Oracle_linux | — | Upgrade babelUpgrade python2-psycopg2-debugUpgrade python2-pygmentsUpgrade python2-numpy-f2pyUpgrade python2-markupsafeUpgrade python2-PyMySQLUpgrade python2-pysocksUpgrade python2-pymongo-gridfsUpgrade python2-sixUpgrade python3-libsUpgrade python2-pytzUpgrade python2-testUpgrade python2-virtualenvUpgrade platform-python-debugUpgrade python2-docsUpgrade python-develUpgrade python-toolsUpgrade python3-idleUpgrade platform-python-develUpgrade python2-ipaddressUpgrade python2-pytestUpgrade python2-bsonUpgrade python2-toolsUpgrade python3-tkinterUpgrade python2-mockUpgrade python2-coverageUpgrade python2-debugUpgrade python2-backports-ssl_match_hostnameUpgrade python2-wheel-wheelUpgrade python2-attrsUpgrade python2-dnsUpgrade python2-pipUpgrade python2-psycopg2-testsUpgrade python2-requestsUpgrade python2-rpm-macrosUpgrade python2Upgrade python-debugUpgrade python-psycopg2-docUpgrade python2-libsUpgrade python2-setuptools_scmUpgrade python2-wheelUpgrade python2-funcsigsUpgrade python2-develUpgrade python-sqlalchemy-docUpgrade python2-numpyUpgrade python2-CythonUpgrade pythonUpgrade python2-scipyUpgrade python2-urllib3Upgrade python2-noseUpgrade python2-babelUpgrade python2-lxmlUpgrade python2-pymongoUpgrade python2-docs-infoUpgrade python2-chardetUpgrade python2-setuptoolsUpgrade python2-pytest-mockUpgrade python2-pyUpgrade python2-pyyamlUpgrade python2-sqlalchemyUpgrade python2-psycopg2Upgrade tkinterUpgrade python2-setuptools-wheelUpgrade python2-pip-wheelUpgrade python2-idnaUpgrade platform-pythonUpgrade python2-pluggyUpgrade python2-numpy-docUpgrade python3-testUpgrade python2-backportsUpgrade python-libsUpgrade python2-jinja2Upgrade python-nose-docsUpgrade python2-tkinterUpgrade python2-docutilsUpgrade python-test | Jul 21, 2020 | Mar 13, 2019 |
| Redhat_linux | — | Upgrade python2-numpy-f2pyUpgrade python3-debugsourceUpgrade python2-setuptools-wheelUpgrade python2-dnsUpgrade python2-babelUpgrade python2-coverageUpgrade python2-numpy-debuginfoUpgrade python-toolsUpgrade python2-tkinterUpgrade python2-toolsUpgrade python-nose-docsUpgrade python2-docutilsUpgrade python2-funcsigsUpgrade python3-tkinterUpgrade python2-sixUpgrade python-psycopg2-debuginfoUpgrade python2-psycopg2Upgrade python-debuginfoUpgrade python2-sqlalchemyUpgrade python2-pyyamlUpgrade scipy-debugsourceUpgrade python-pymongo-debuginfoUpgrade python3-libsUpgrade python2-noseUpgrade python2-bson-debuginfoUpgrade python2-docsUpgrade python2-backports-ssl_match_hostnameUpgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-pymongoUpgrade python2-lxmlUpgrade python2-mockUpgrade python-sqlalchemy-docUpgrade python-lxml-debugsourceUpgrade Cython-debugsourceUpgrade python2-pytest-mockUpgrade python2-Cython-debuginfoUpgrade babelUpgrade python2-PyMySQLUpgrade python3-idleUpgrade python2-scipy-debuginfoUpgrade python3-debuginfoUpgrade python2-numpy-docUpgrade python2-ipaddressUpgrade python2-debugsourceUpgrade platform-python-develUpgrade python2-debugUpgrade python2-lxml-debuginfoUpgrade python2-rpm-macrosUpgrade python-debugUpgrade python2-setuptoolsUpgrade platform-python-debugUpgrade python2-pluggyUpgrade python2-bsonUpgrade PyYAML-debugsourceUpgrade python2-wheelUpgrade python-coverage-debugsourceUpgrade tkinterUpgrade python2-pytestUpgrade python2-coverage-debuginfoUpgrade python2-idnaUpgrade python2-urllib3Upgrade python2-psycopg2-debug-debuginfoUpgrade python2-setuptools_scmUpgrade python2-debuginfoUpgrade python2-pysocksUpgrade python2-chardetUpgrade python-testUpgrade python-libsUpgrade python2-libsUpgrade platform-pythonUpgrade python-psycopg2-docUpgrade python2-wheel-wheelUpgrade python2-CythonUpgrade python2-psycopg2-debugUpgrade python3-testUpgrade python2-markupsafeUpgrade python2-develUpgrade python-develUpgrade python2-psycopg2-debuginfoUpgrade python2-virtualenvUpgrade python2-pygmentsUpgrade python2Upgrade python2-requestsUpgrade python2-jinja2Upgrade python2-pipUpgrade numpy-debugsourceUpgrade python2-scipyUpgrade python2-testUpgrade python2-pytzUpgrade python2-attrsUpgrade python2-pip-wheelUpgrade python-pymongo-debugsourceUpgrade python2-numpyUpgrade python2-pyyaml-debuginfoUpgrade python2-pyUpgrade pythonUpgrade python2-pymongo-debuginfoUpgrade python2-backportsUpgrade python2-pymongo-gridfsUpgrade python2-docs-info | Aug 7, 2019 | Mar 13, 2019 |
| Rocky_linux | — | Upgrade python-psycopg2-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade scipy-debugsourceUpgrade python2-markupsafeUpgrade python2-psycopg2-debuginfoUpgrade python-pymongo-debugsourceUpgrade python-psycopg2-docUpgrade python2-coverage-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-CythonUpgrade python2-pymongo-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-bsonUpgrade python2-psycopg2-testsUpgrade python-psycopg2-debuginfoUpgrade Cython-debugsourceUpgrade python2-coverageUpgrade python-coverage-debugsourceUpgrade python2-Cython-debuginfoUpgrade PyYAML-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-pyyamlUpgrade python2-psycopg2Upgrade python2-scipyUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-bson-debuginfo | Mar 12, 2024 | Mar 13, 2019 |
| Suse | — | Upgrade python3-urllib3-testUpgrade python2-urllib3-testUpgrade python-urllib3Upgrade python3-CherryPyUpgrade python3-urllib3Upgrade python2-urllib3 | Sep 17, 2019 | Mar 12, 2019 |
| Ubuntu | — | Upgrade python3.8-minimalUpgrade python3.6-minimalUpgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python3.7-minimalUpgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.7Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python3.12-minimalUpgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.6Upgrade python2.7Upgrade python3.12Upgrade python3.7 (Ubuntu Pro)Upgrade python3.10-minimalUpgrade python2.7-minimalUpgrade python3.11-minimalUpgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.11-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.11Upgrade python3.5Upgrade python3.6 (Ubuntu Pro)Upgrade python3.4 (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python3.11 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python2.7 (Ubuntu Pro)Upgrade python3.10 | Sep 10, 2019 | Mar 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 13, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub