Ubuntu
python-urllib3 package

python-urllib3 1.22-1ubuntu0.18.04.2 source package in Ubuntu

Changelog

python-urllib3 (1.22-1ubuntu0.18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: CRLF injection via method parameter
    - debian/patches/CVE-2020-26137.patch: raise ValueError if method
      contains control characters in urllib3/connection.py,
      test/with_dummyserver/test_connectionpool.py.
    - CVE-2020-26137

 -- Marc Deslauriers <email address hidden>  Thu, 01 Oct 2020 14:00:15 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main python
Bionic security main python

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-urllib3_1.22.orig.tar.gz 220.8 KiB cc44da8e1145637334317feebd728bd869a35285b93cbb4cca2577da7e62db4f
python-urllib3_1.22.orig.tar.gz.asc 801 bytes b80e563a665dd9d3a3d4caabc0b4436227ff7b2631ab8b7e616ad953818d898c
python-urllib3_1.22-1ubuntu0.18.04.2.debian.tar.xz 34.9 KiB d10fe8cb53ce06b90e63be6e7e672eda6e6b5ea23a80e67df01010085e5633de
python-urllib3_1.22-1ubuntu0.18.04.2.dsc 2.8 KiB 0c25ca12a1d4c38a385476165b2f07b46fd9722cdd11a986c36e5c97f82a1799

View changes file

Binary packages built by this source

python-urllib3: HTTP library with thread-safe connection pooling for Python

 urllib3 supports features left out of urllib and urllib2 libraries.
 .
   - Re-use the same socket connection for multiple requests (HTTPConnectionPool
     and HTTPSConnectionPool) (with optional client-side certificate
     verification).
   - File posting (encode_multipart_formdata).
   - Built-in redirection and retries (optional).
   - Supports gzip and deflate decoding.
   - Thread-safe and sanity-safe.
   - Small and easy to understand codebase perfect for extending and
     building upon.

python3-urllib3: HTTP library with thread-safe connection pooling for Python3

 urllib3 supports features left out of urllib and urllib2 libraries.
 .
   - Re-use the same socket connection for multiple requests (HTTPConnectionPool
     and HTTPSConnectionPool) (with optional client-side certificate
     verification).
   - File posting (encode_multipart_formdata).
   - Built-in redirection and retries (optional).
   - Supports gzip and deflate decoding.
   - Thread-safe and sanity-safe.
   - Small and easy to understand codebase perfect for extending and
     building upon.
 .
 This package contains the Python 3 version of the library.