Publishing details

Published on 2024-11-05

Changelog

python-urllib3 (2.0.7-ok3) nile; urgency=medium

  * SECURITY UPDATE: The Proxy-Authorization header is not correctly
    stripped     when redirecting to a different host.     -
    debian/patches/CVE-2024-37891.patch: Add Proxy-Authorization to
    DEFAULT_REMOVE_HEADERS_ON_REDIRECT in src/urllib3/util/retry.py. Add
    header to tests.     - CVE-2024-37891   * Skip failing test causing
    build-time failures: (LP: #2084715)     - debian/rules: Add not
    test_recent_date to PYBUILD_TEST_ARGS.

 -- liubo01 <email address hidden>  Tue, 05 Nov 2024 09:23:22 +0800

Available diffs

diff from 2.0.7-ok2 to 2.0.7-ok3 (2.0 KiB)

Builds

amd64

Built packages

python3-urllib3 HTTP library with thread-safe connection pooling for Python3

Package files

python-urllib3_2.0.7-ok3.debian.tar.xz (8.1 KiB)
python-urllib3_2.0.7-ok3.dsc (2.4 KiB)
python-urllib3_2.0.7.orig.tar.gz (275.9 KiB)
python3-urllib3_2.0.7-ok3_all.deb (87.4 KiB)