Ubuntu
python-urllib3 package

python-urllib3 1.24.1-1ubuntu1 source package in Ubuntu

Changelog

python-urllib3 (1.24.1-1ubuntu1) eoan; urgency=medium

  * SECURITY UPDATE: CRLF injection issue
    - debian/patches/CVE-2019-11236-1.patch: check for control chars in URL
      in src/urllib3/connection.py, src/urllib3/connectionpool.py,
      src/urllib3/contrib/pyopenssl.py, src/urllib3/contrib/socks.py,
      src/urllib3/poolmanager.py, src/urllib3/response.py,
      src/urllib3/util/ssl_.py, src/urllib3/util/url.py,
      test/__init__.py, test/test_util.py,
      test/with_dummyserver/test_https.py,
      test/with_dummyserver/test_socketlevel.py.
    - debian/patches/CVE-2019-11236-2.patch: percent-encode invalid target
      characters in src/urllib3/util/url.py, test/test_util.py.
    - debian/patches/CVE-2019-11236-3.patch: don't use embedded python-six
      in src/urllib3/util/url.py.
    - CVE-2019-11236
  * SECURITY UPDATE: CA cert mishandling
    - debian/patches/CVE-2019-11324.patch: don't load system certificates
      by default when any other CA cert parameters are specified in
      src/urllib3/util/ssl_.py.
    - CVE-2019-11324

 -- Marc Deslauriers <email address hidden>  Mon, 13 May 2019 13:16:33 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Eoan: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-urllib3_1.24.1.orig.tar.gz 224.3 KiB de9529817c93f27c8ccbfead6985011db27bd0ddfcdb2d86f3f663385c6a9c22
python-urllib3_1.24.1-1ubuntu1.debian.tar.xz 14.6 KiB 9cb7348f80b40b4353c99f1b5afeca02c284e52332b9b826444f76876d7d20fe
python-urllib3_1.24.1-1ubuntu1.dsc 2.5 KiB c0047bf5d62968fc5a701fc282b9f14302a54ba8be75ba2027cb1a7c15bdec62

View changes file

Binary packages built by this source

python-urllib3: No summary available for python-urllib3 in ubuntu focal.

No description available for python-urllib3 in ubuntu focal.

python3-urllib3: HTTP library with thread-safe connection pooling for Python3

 urllib3 supports features left out of urllib and urllib2 libraries.
 .
   - Re-use the same socket connection for multiple requests (HTTPConnectionPool
     and HTTPSConnectionPool) (with optional client-side certificate
     verification).
   - File posting (encode_multipart_formdata).
   - Built-in redirection and retries (optional).
   - Supports gzip and deflate decoding.
   - Thread-safe and sanity-safe.
   - Small and easy to understand codebase perfect for extending and
     building upon.
 .
 This package contains the Python 3 version of the library.