CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "idle-python2.7", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-dbg", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-dev", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-dev-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-minimal", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-minimal-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-stdlib", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-stdlib-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "libpython2.7-testsuite", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-dbg", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-dev", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-dev-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-doc", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-examples", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-minimal", "binary_version": "2.7.6-8ubuntu0.3" }, { "binary_name": "python2.7-minimal-dbgsym", "binary_version": "2.7.6-8ubuntu0.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "idle-python3.4", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-dbg", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-dev", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-dev-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-minimal", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-minimal-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-stdlib", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-stdlib-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "libpython3.4-testsuite", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-dbg", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-dev", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-dev-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-doc", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-examples", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-minimal", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-minimal-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-venv", "binary_version": "3.4.3-1ubuntu1~14.04.5" }, { "binary_name": "python3.4-venv-dbgsym", "binary_version": "3.4.3-1ubuntu1~14.04.5" } ] }