ELSA-2024-6162

ELSA-2024-6162 - python-urllib3 security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-09-03

Description

[1.26.5-5.1]
- Security fix for CVE-2024-37891
- Backport upstream patch to fix TypeError for http connection if the PoolManager
- is instantiated with server_hostname
Resolves: RHEL-49853

Related CVEs

CVE-2024-37891

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	python-urllib3-1.26.5-5.el9_4.1.src.rpm	f4eb9d0958a71ccafcdf9ff7263478aa	-	ol9_aarch64_baseos_latest
	python-urllib3-1.26.5-5.el9_4.1.src.rpm	f4eb9d0958a71ccafcdf9ff7263478aa	-	ol9_aarch64_u4_baseos_patch
	python3-urllib3-1.26.5-5.el9_4.1.noarch.rpm	13242fa94728c82752ec8556ca0e9ec3	-	ol9_aarch64_baseos_latest
	python3-urllib3-1.26.5-5.el9_4.1.noarch.rpm	13242fa94728c82752ec8556ca0e9ec3	-	ol9_aarch64_u4_baseos_patch
Oracle Linux 9 (x86_64)	python-urllib3-1.26.5-5.el9_4.1.src.rpm	f4eb9d0958a71ccafcdf9ff7263478aa	-	ol9_x86_64_baseos_latest
	python-urllib3-1.26.5-5.el9_4.1.src.rpm	f4eb9d0958a71ccafcdf9ff7263478aa	-	ol9_x86_64_u4_baseos_patch
	python3-urllib3-1.26.5-5.el9_4.1.noarch.rpm	13242fa94728c82752ec8556ca0e9ec3	-	ol9_x86_64_baseos_latest
	python3-urllib3-1.26.5-5.el9_4.1.noarch.rpm	13242fa94728c82752ec8556ca0e9ec3	-	ol9_x86_64_u4_baseos_patch