[CLSA-2026:1793017246] python3.11-pip: Fix of CVE-2023-43804
Type:
security
Severity:
Important
Release date:
2026-10-26 12:20:57 UTC
Description:
- CVE-2023-43804: strip the Cookie header on cross-host redirect in bundled urllib3
CVEs fixed:
Updated packages:
  • python3.11-pip-22.3.1-6.el9.tuxcare.els3.noarch.rpm
    sha:c02c374187223d1976477d40360220af45c356c29ace333a803bd0a48f518c8d
  • python3.11-pip-wheel-22.3.1-6.el9.tuxcare.els3.noarch.rpm
    sha:d7eeda623a1f020e9f4128a103647605bd79aca52e5131fc0bffae7603d52cd7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.