Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
Critical Security Update for Python urllib3 Library on Red Hat
published 2 years ago
Summary
A security update is available for the urllib3 library in Python, which is used by various applications to make HTTP requests. This update fixes a critical issue that could allow an attacker to execute arbitrary code on a vulnerable system. Affected systems should be updated as soon as possible to prevent potential security risks.
What to do
- Update redhat python-urllib3 to version 0:1.24.2-5.el8_9.2.
- Update redhat python3-urllib3 to version 0:1.24.2-5.el8_9.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:8::baseos | redhat | python-urllib3 |
< 0:1.24.2-5.el8_9.2 Fix: upgrade to 0:1.24.2-5.el8_9.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | python3-urllib3 |
< 0:1.24.2-5.el8_9.2 Fix: upgrade to 0:1.24.2-5.el8_9.2
|
Original advisory text
Red Hat Security Advisory: python-urllib3 security update
References
- https://access.redhat.com/errata/RHSA-2024:0116 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2242493 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2246840 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0116.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-43804 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-43804 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-43804 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-45803 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45803 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45803 Vendor Advisory
- https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478e... Third Party Advisory
- https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4 Third Party Advisory
- https://www.rfc-editor.org/rfc/rfc9110.html#name-get Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published18 Sep 2024
Updated6 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2024:0116 · OSV
Track software like this
Free during beta