https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:29:54 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:3335 <p><strong>Affected:</strong> AlmaLinux:8: python-psycopg2-doc, AlmaLinux:8: python2-Cython, AlmaLinux:8: python2-PyMySQL, AlmaLinux:8: python2-attrs, AlmaLinux:8: python2-chardet, AlmaLinux:8: python2-coverage, AlmaLinux:8: python2-dns, AlmaLinux:8: python2-docs, AlmaLinux:8: python2-docs-info, AlmaLinux:8: python2-docutils and 17 more</p> <p>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.</p> <p>Security Fix(es):</p> <p>* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)</p> <p>* python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)</p> <p>* python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)</p> <p>* python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948)</p> <p>* python-urllib3: CRLF injection due to not encoding the &#39;\r\n&#39; sequence leading to possible attack on internal service (CVE-2019-11236)</p> <p>* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: python-psycopg2-doc, AlmaLinux:8: python2-Cython, AlmaLinux:8: python2-PyMySQL, AlmaLinux:8: python2-attrs, AlmaLinux:8: python2-chardet, AlmaLinux:8: python2-coverage, AlmaLinux:8: python2-dns, AlmaLinux:8: python2-docs, AlmaLinux:8: python2-docs-info, AlmaLinux:8: python2-docutils and 17 more</p> <p>Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.</p> <p>Security Fix(es):</p> <p>* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)</p> <p>* python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)</p> <p>* python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)</p> <p>* python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948)</p> <p>* python-urllib3: CRLF injection due to not encoding the &#39;\r\n&#39; sequence leading to possible attack on internal service (CVE-2019-11236)</p> <p>* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:3335 https://cve.radiocsirt.org/vuln/bdu:2019-02105 bdu:2019-02105 https://cve.radiocsirt.org/vuln/bdu:2019-02105 https://cve.radiocsirt.org/vuln/bell-cve-2019-11324 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-11324 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-11324 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2019-11324 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-54331 EUVD-2026-54331 https://cve.radiocsirt.org/vuln/euvd-2026-54331 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11324 <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11324 https://cve.radiocsirt.org/vuln/ghsa-mh33-7rrq-662w <p><strong>Affected:</strong> PyPI: urllib3</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.</p> <p><strong>Affected:</strong> PyPI: urllib3</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.</p> https://cve.radiocsirt.org/vuln/ghsa-mh33-7rrq-662w https://cve.radiocsirt.org/vuln/gsd-2019-11324 gsd-2019-11324 https://cve.radiocsirt.org/vuln/gsd-2019-11324 https://cve.radiocsirt.org/vuln/msrc_cve-2019-11324 msrc_CVE-2019-11324 https://cve.radiocsirt.org/vuln/msrc_cve-2019-11324 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2131-1 <p>Security update for python-urllib3</p> <p>Security update for python-urllib3</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2131-1 https://cve.radiocsirt.org/vuln/pysec-2019-133 <p><strong>Affected:</strong> PyPI: urllib3</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.</p> <p><strong>Affected:</strong> PyPI: urllib3</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.</p> https://cve.radiocsirt.org/vuln/pysec-2019-133 https://cve.radiocsirt.org/vuln/rhba-2020:2785 <p>python-urllib3: CRLF injection due to not encoding the &#39;\r\n&#39; sequence leading to possible attack on internal service python-urllib3: Certification mishandle when error should be thrown</p> <p>python-urllib3: CRLF injection due to not encoding the &#39;\r\n&#39; sequence leading to possible attack on internal service python-urllib3: Certification mishandle when error should be thrown</p> https://cve.radiocsirt.org/vuln/rhba-2020:2785 https://cve.radiocsirt.org/vuln/suse-su-2019:2300-1 <p>Security update for python-urllib3</p> <p>Security update for python-urllib3</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2300-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11324 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-urllib3</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-urllib3</p> <p>The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11324