Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377). - CVE-2018-25091: Fixed a potential leak of the Authorization header during a cross-origin redirect (bsc#1216275). - CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377). - CVE-2018-25091: Fixed a potential leak of the Authorization header during a cross-origin redirect (bsc#1216275). - CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1215968
- https://bugzilla.suse.com/1216275
- https://bugzilla.suse.com/1216377
- https://www.suse.com/security/cve/CVE-2018-25091
- https://www.suse.com/security/cve/CVE-2023-43804
- https://www.suse.com/security/cve/CVE-2023-45803
- https://www.suse.com/support/update/announcement/2023/suse-su-20234352-1/