Search for packages
| purl | pkg:deb/debian/python-urllib3@1.26.5-1~exp1 |
| Next non-vulnerable version | 1.26.12-1+deb12u1 |
| Latest non-vulnerable version | 1.26.12-1+deb12u1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1cgk-q3r3-aaam
Aliases: CVE-2024-37891 GHSA-34jh-p97f-mpxf |
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. ## Affected usages We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: * Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. * Not disabling HTTP redirects. * Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. ## Remediation * Using the `Proxy-Authorization` header with urllib3's `ProxyManager`. * Disabling HTTP redirects using `redirects=False` when sending requests. * Not using the `Proxy-Authorization` header. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-c4sy-7zv4-aaas
Aliases: CVE-2023-43804 GHSA-v845-jxx5-vc9f PYSEC-0000-CVE-2023-43804 PYSEC-2023-192 |
`Cookie` HTTP header isn't stripped on cross-origin redirects |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-r496-vgsm-aaac
Aliases: CVE-2023-45803 GHSA-g4mx-q9vg-27p4 PYSEC-0000-CVE-2023-45803 PYSEC-2023-212 |
urllib3's request body not stripped after redirect from 303 status changes request method to GET |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-457q-9vme-aaac | The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. The percent_encodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length N, the size of percent_encodings may be up to O(N). The next step (normalize existing percent-encoded bytes) also takes up to O(N) for each step, so the total time is O(N^2). If percent_encodings were deduplicated, the time to compute _encode_invalid_chars would be O(kN), where k is at most 484 ((10+6*2)^2). |
CVE-2020-7212
GHSA-hmv2-79q8-fv6g PYSEC-2020-149 |
| VCID-6rq6-hxp1-aaae | Uncontrolled Resource Consumption An issue was discovered in urllib3, when provided with a URL containing many `@` characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect. |
CVE-2021-33503
GHSA-q2q7-5pp4-w6pg PYSEC-2021-108 |
| VCID-7ghb-wt6a-aaah | urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116. |
CVE-2020-26137
GHSA-wqvq-5m8c-6g24 PYSEC-2020-148 |
| VCID-9ruw-cgv6-aaar | The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted. |
CVE-2021-28363
GHSA-5phf-pp7p-vc2r PYSEC-2021-59 |
| VCID-c4sy-7zv4-aaas | `Cookie` HTTP header isn't stripped on cross-origin redirects |
CVE-2023-43804
GHSA-v845-jxx5-vc9f PYSEC-0000-CVE-2023-43804 PYSEC-2023-192 |
| VCID-mzxq-w8z6-aaah | urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive). |
CVE-2018-25091
GHSA-gwvm-45gx-3cf8 PYSEC-0000-CVE-2018-25091 PYSEC-2023-207 |
| VCID-n7px-rq6v-aaaa | The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument. |
CVE-2019-11324
GHSA-mh33-7rrq-662w PYSEC-2019-133 PYSEC-2019-63 |
| VCID-r496-vgsm-aaac | urllib3's request body not stripped after redirect from 303 status changes request method to GET |
CVE-2023-45803
GHSA-g4mx-q9vg-27p4 PYSEC-0000-CVE-2023-45803 PYSEC-2023-212 |
| VCID-v8kv-yq79-aaar | In the urllib3 library for Python, CRLF injection is possible if the attacker controls the request parameter. |
CVE-2019-11236
GHSA-r64q-w8jr-g9qp PYSEC-2019-132 PYSEC-2019-62 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T19:59:54.330917+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 36.1.3 |
| 2025-06-21T17:57:01.171501+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:46:55.062117+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:07:41.341287+00:00 | Debian Oval Importer | Fixing | VCID-mzxq-w8z6-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:46:10.138744+00:00 | Debian Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 36.1.3 |
| 2025-06-21T13:13:14.789030+00:00 | Debian Oval Importer | Fixing | VCID-r496-vgsm-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T12:58:15.563268+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T12:35:03.202018+00:00 | Debian Oval Importer | Fixing | VCID-c4sy-7zv4-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T08:55:06.922691+00:00 | Debian Importer | Affected by | VCID-1cgk-q3r3-aaam | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-06-21T06:31:59.323067+00:00 | Debian Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 36.1.3 |
| 2025-06-21T05:58:32.907806+00:00 | Debian Oval Importer | Fixing | VCID-9ruw-cgv6-aaar | None | 36.1.3 |
| 2025-06-21T05:19:39.994207+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 36.1.3 |
| 2025-06-21T04:47:06.267938+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | None | 36.1.3 |
| 2025-06-21T03:58:43.486630+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 36.1.3 |
| 2025-06-21T03:16:19.735962+00:00 | Debian Oval Importer | Fixing | VCID-457q-9vme-aaac | None | 36.1.3 |
| 2025-06-21T03:06:42.414171+00:00 | Debian Oval Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 36.1.3 |
| 2025-06-21T02:19:32.721184+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | None | 36.1.3 |
| 2025-06-21T02:15:56.460135+00:00 | Debian Importer | Fixing | VCID-v8kv-yq79-aaar | None | 36.1.3 |
| 2025-06-21T01:55:15.333311+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-06-20T21:21:25.527221+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | None | 36.1.3 |
| 2025-06-20T20:29:47.633466+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-06-08T13:17:39.293463+00:00 | Debian Oval Importer | Fixing | VCID-mzxq-w8z6-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:28:43.001112+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:40:22.849549+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:01:17.229085+00:00 | Debian Oval Importer | Fixing | VCID-mzxq-w8z6-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:07:55.651829+00:00 | Debian Oval Importer | Fixing | VCID-r496-vgsm-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T05:53:13.937868+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T05:33:09.476903+00:00 | Debian Oval Importer | Fixing | VCID-c4sy-7zv4-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T23:37:09.415719+00:00 | Debian Oval Importer | Fixing | VCID-9ruw-cgv6-aaar | None | 36.1.0 |
| 2025-06-07T22:57:18.100904+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 36.1.0 |
| 2025-06-07T22:24:10.967112+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | None | 36.1.0 |
| 2025-06-07T21:34:00.082079+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 36.1.0 |
| 2025-06-07T20:49:20.379764+00:00 | Debian Oval Importer | Fixing | VCID-457q-9vme-aaac | None | 36.1.0 |
| 2025-06-07T20:39:27.852903+00:00 | Debian Oval Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 36.1.0 |
| 2025-06-05T14:19:04.978456+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 36.1.0 |
| 2025-04-13T02:36:50.578680+00:00 | Debian Oval Importer | Affected by | VCID-c4sy-7zv4-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-13T02:36:43.763535+00:00 | Debian Oval Importer | Affected by | VCID-r496-vgsm-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-13T02:36:36.568560+00:00 | Debian Oval Importer | Affected by | VCID-1cgk-q3r3-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T22:37:25.819440+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T22:02:52.383350+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:44:47.644708+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:37:22.385840+00:00 | Debian Oval Importer | Fixing | VCID-6rq6-hxp1-aaae | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:01:35.431148+00:00 | Debian Oval Importer | Fixing | VCID-9ruw-cgv6-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:35:09.584399+00:00 | Debian Oval Importer | Fixing | VCID-457q-9vme-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:05:40.109758+00:00 | Debian Oval Importer | Fixing | VCID-mzxq-w8z6-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:09:57.780175+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:11:49.850595+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:33:57.736338+00:00 | Debian Oval Importer | Fixing | VCID-mzxq-w8z6-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:39:57.594026+00:00 | Debian Oval Importer | Fixing | VCID-r496-vgsm-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:25:04.074625+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:04:33.247890+00:00 | Debian Oval Importer | Fixing | VCID-c4sy-7zv4-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T22:09:14.805207+00:00 | Debian Oval Importer | Fixing | VCID-9ruw-cgv6-aaar | None | 36.0.0 |
| 2025-04-07T21:29:20.324265+00:00 | Debian Oval Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 36.0.0 |
| 2025-04-07T20:55:43.338980+00:00 | Debian Oval Importer | Fixing | VCID-v8kv-yq79-aaar | None | 36.0.0 |
| 2025-04-07T20:03:17.837799+00:00 | Debian Oval Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 36.0.0 |
| 2025-04-07T19:19:46.882267+00:00 | Debian Oval Importer | Fixing | VCID-457q-9vme-aaac | None | 36.0.0 |
| 2025-04-07T19:09:56.565611+00:00 | Debian Oval Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 36.0.0 |
| 2025-04-05T16:10:46.956439+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 36.0.0 |
| 2025-04-05T10:18:56.821902+00:00 | Debian Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 36.0.0 |
| 2025-04-05T06:11:16.826360+00:00 | Debian Importer | Affected by | VCID-1cgk-q3r3-aaam | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-04-05T03:47:10.016612+00:00 | Debian Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 36.0.0 |
| 2025-04-04T05:05:29.431172+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | None | 36.0.0 |
| 2025-04-04T05:01:42.114918+00:00 | Debian Importer | Fixing | VCID-v8kv-yq79-aaar | None | 36.0.0 |
| 2025-04-04T04:40:34.156802+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-04-03T23:59:21.712055+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | None | 36.0.0 |
| 2025-04-03T23:18:06.578295+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-02-22T00:09:35.574916+00:00 | Debian Importer | Affected by | VCID-1cgk-q3r3-aaam | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2025-02-21T14:19:02.158949+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | None | 35.1.0 |
| 2025-02-21T14:19:01.480804+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2025-02-21T13:59:57.821689+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | None | 35.1.0 |
| 2025-02-21T13:59:56.412477+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2025-02-20T01:51:34.982609+00:00 | Debian Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 35.1.0 |
| 2025-02-19T15:15:04.846744+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 35.1.0 |
| 2025-02-19T05:08:36.480888+00:00 | Debian Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 35.1.0 |
| 2025-02-19T05:07:59.905360+00:00 | Debian Importer | Fixing | VCID-v8kv-yq79-aaar | None | 35.1.0 |
| 2024-12-15T15:28:42.501572+00:00 | Debian Importer | Affected by | VCID-1cgk-q3r3-aaam | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T03:25:56.617543+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-24T03:08:15.477719+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 35.0.0 |
| 2024-11-22T12:21:09.831190+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 35.0.0 |
| 2024-10-11T00:50:28.172834+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-11T00:34:52.721456+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 34.0.2 |
| 2024-10-09T11:54:37.825129+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 34.0.2 |
| 2024-09-20T05:21:08.808244+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-20T05:13:41.034708+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 34.0.1 |
| 2024-09-18T21:29:03.887760+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 34.0.1 |
| 2024-04-26T05:29:29.368206+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | None | 34.0.0rc4 |
| 2024-04-26T05:29:28.483339+00:00 | Debian Importer | Affected by | VCID-r496-vgsm-aaac | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-26T05:19:22.487253+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | None | 34.0.0rc4 |
| 2024-04-26T05:19:21.685991+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-25T01:20:30.316321+00:00 | Debian Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 34.0.0rc4 |
| 2024-04-24T19:10:09.705206+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 34.0.0rc4 |
| 2024-04-24T13:53:30.066830+00:00 | Debian Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 34.0.0rc4 |
| 2024-04-24T13:52:59.007732+00:00 | Debian Importer | Fixing | VCID-v8kv-yq79-aaar | None | 34.0.0rc4 |
| 2024-01-11T02:20:41.591144+00:00 | Debian Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 34.0.0rc2 |
| 2024-01-10T20:39:03.172749+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 34.0.0rc2 |
| 2024-01-10T16:39:09.502838+00:00 | Debian Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 34.0.0rc2 |
| 2024-01-10T16:38:36.159883+00:00 | Debian Importer | Fixing | VCID-v8kv-yq79-aaar | None | 34.0.0rc2 |
| 2024-01-05T09:51:09.298986+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |
| 2024-01-05T09:51:06.845209+00:00 | Debian Importer | Affected by | VCID-c4sy-7zv4-aaas | None | 34.0.0rc1 |
| 2024-01-04T14:40:59.880289+00:00 | Debian Importer | Fixing | VCID-6rq6-hxp1-aaae | None | 34.0.0rc1 |
| 2024-01-04T09:59:02.968207+00:00 | Debian Importer | Fixing | VCID-7ghb-wt6a-aaah | None | 34.0.0rc1 |
| 2024-01-04T06:23:03.310002+00:00 | Debian Importer | Fixing | VCID-n7px-rq6v-aaaa | None | 34.0.0rc1 |
| 2024-01-04T06:22:37.155286+00:00 | Debian Importer | Fixing | VCID-v8kv-yq79-aaar | None | 34.0.0rc1 |