SUSE-SU-2021:0299-1

Details

This update for python-urllib3 fixes the following issues:

Raise ValueError if method contains control characters and thus prevents CRLF injection into URLs (bsc#1177211, bpo#39603, CVE-2020-26116,).

Affected Packages

python-urllib3

SUSE Enterprise Storage 5SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

1.22-3.23.1

python3-urllib3

SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5SUSE Linux Enterprise Workstation Extension 12 SP5

Fixed in:

1.22-3.23.1

References

REPORT

https://bugzilla.suse.com/1177211

WEB

https://www.suse.com/security/cve/CVE-2020-26116

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20210299-1/