drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in urllib3 (Aktualisierung)
Name: |
Ausführen beliebiger Kommandos in urllib3 (Aktualisierung) |
|
ID: |
USN-3990-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 14.04 ESM |
|
Datum: |
Mo, 29. Juli 2019, 17:39 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11236 |
|
Applikationen: |
python-urllib3 |
|
Update von: |
Mehrere Probleme in urllib3 |
|
Originalnachricht |
--===============5319344121535296597== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="mYCpIKhGyMATD0i+" Content-Disposition: inline
--mYCpIKhGyMATD0i+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-3990-2 July 29, 2019
python-urllib3 vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM
Summary:
urllib3 could be used to perform a CRLF injection if it received a specially crafted request.
Software Description: - python-urllib3: HTTP library with thread-safe connection pooling for Python
Details:
USN-3990-1 fixed a vulnerability in urllib3. This update provides the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that urllib3 incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF injection. (CVE-2019-11236)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.04 ESM: python-urllib3 1.7.1-1ubuntu4.1+esm1 python3-urllib3 1.7.1-1ubuntu4.1+esm1
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/3990-2 https://usn.ubuntu.com/3990-1 CVE-2019-11236
--mYCpIKhGyMATD0i+ Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBAgAGBQJdPww7AAoJEEW851uECx9p0gAP/1E70tnYU0r5m3pJOrh6vRqs zsLAvJgJ2U7VsMkf6JsQUU6HTdb8clqt5y4if5YASbi0D9bah7ZmVfi8tpCO6hoZ V++q8/94KpctUhc/CqVwA0UQ49XgBzuVT2mEPfZVveUYL+pPccPi4RoHKQ9pXU2T LV1TugO5IjRtM+zgs0uT8OydIAeoPKYBNmaVSv8dORcdqT1JtxwbgC2koIBvGXiB g4nWaN/HXzzfMzuT+rK8wNL8rQWMF4uJvIQuxIkbvJWxKHcWIr4IWGWTDJmsKYT4 ODZLWVJmiQfwJvKmqNYIkOsqb5KIer45GjxRwpzJy9YYPr5QDPXixGxAmXu7S8xN jMBTGGf6ONQ9KOxQY5raGxI8XzEs3i2FBPTfx1R90Y7pb9eCHAzjhk9SJXcF93iR mRyQ3O2OoQE5WK5PYWoBbPOX51Hx/BKZ/RUIBPB6hppgedo/7YZz/gc3AIcvifOS 2UTod5o3XU+vEG/lEgp0Ikqhp/s26NFbIKk0zZ+HQQrlztdUSedrONqcEaZc+R87 BidAovFyS+GkmMtZAq4J0596U7+s3FfHHMNmRn8J9wIgVi5VGLcVFnjbECJdK0vk cEVJhIpqmAGTgreaiXYTbeQ0BtttFi+7+1PHTNvWe10C6WHtZyNCfJK/jXhbztdi qr4jAMnCnqxHnU3/pULV =EDML -----END PGP SIGNATURE-----
--mYCpIKhGyMATD0i+--
--===============5319344121535296597== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|