Ubuntu
python-urllib3 package

python-urllib3 1.26.5-1~exp1ubuntu0.1 source package in Ubuntu

Changelog

python-urllib3 (1.26.5-1~exp1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: http cookie leakage via http redirect
    - debian/patches/CVE-2023-43804.patch: removes the cookie from the
      http request when it is redirected to a different origin.
    - CVE-2023-43804
  * SECURITY UPDATE: http body leakage via http redirect
    - debian/patches/CVE-2023-45803.patch: removes the body from the
      http request when it is redirected to a different origin and the
      http verb is changed to GET.
    - CVE-2023-45803

 -- Jorge Sancho Larraz <email address hidden>  Tue, 24 Oct 2023 17:20:49 +0200

Upload details

Uploaded by:
Jorge Sancho Larraz
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main python
Jammy security main python

Builds

Jammy: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-urllib3_1.26.5.orig.tar.gz 286.0 KiB a7acd0977125325f516bda9735fa7142b909a8d01e8b2e4c8108d0984e6e0098
python-urllib3_1.26.5-1~exp1ubuntu0.1.debian.tar.xz 14.6 KiB 1a8b46dbdbd514217c635377996d497f13572b258d016121c1c374da52ac0ba3
python-urllib3_1.26.5-1~exp1ubuntu0.1.dsc 2.3 KiB 7a84cada2cdfba29f909fd9cf99efcd8fccf27c276da03860327b8aaaa8aea84

View changes file

Binary packages built by this source

python3-urllib3: HTTP library with thread-safe connection pooling for Python3

 urllib3 supports features left out of urllib and urllib2 libraries.
 .
   - Re-use the same socket connection for multiple requests (HTTPConnectionPool
     and HTTPSConnectionPool) (with optional client-side certificate
     verification).
   - File posting (encode_multipart_formdata).
   - Built-in redirection and retries (optional).
   - Supports gzip and deflate decoding.
   - Thread-safe and sanity-safe.
   - Small and easy to understand codebase perfect for extending and
     building upon.
 .
 This package contains the Python 3 version of the library.