Red Hat Security AdvisoryRHSA-2019:2035
python-requests security update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python-requests-2.6.0-5.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) python-requests-2.6.0-5.el7
- Red Hat Enterprise Linux Server (v. 7) python-requests-2.6.0-5.el7
- Red Hat Enterprise Linux Workstation (v. 7) python-requests-2.6.0-5.el7
Fixes 1 record
Priority MEDIUM 43
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06925 · Published 2018-10-09 · Partial fix · 2.20.0 CWE-522
