oss-sec mailing list archives

Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client

From: Marcus Meissner <meissner () suse de>
Date: Thu, 23 Jun 2016 14:14:32 +0200

On Fri, Jun 17, 2016 at 11:22:32AM +0200, Cedric Buissart wrote:

Thanks for details!
The glibc side of the issue has its own upstream bug entry:
https://sourceware.org/bugzilla/show_bug.cgi?id=20018


Should a CVE also be assigned for the glibc problem?

Ciao, Marcus

Current thread:

CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client Cedric Buissart (Jun 14)
- Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client Tim (Jun 14)
  - Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client Cedric Buissart (Jun 15)
    - Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client Tim (Jun 15)
    - Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client Cedric Buissart (Jun 17)
    - Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client Marcus Meissner (Jun 23)
    - Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client cve-assign (Jun 23)
- Re: CVE request: Python HTTP header injection in urrlib2/urllib/httplib/http.client cve-assign (Jun 16)