urllib HTTP header injection CVE-2016-5699

Summary

It was found that the Python's httplib library (used by urllib, urllib2 and others) did not properly check HTTPConnection.putheader() function arguments. An attacker could use this flaw to inject additional headers in a Python application that allowed user provided header names or values.

More details: https://bugs.python.org/issue22928