python-requests-2.20.0-6.el8_10
エラータID: AXSA:2025-10703:04
リリース日:
2025/08/07 Thursday - 14:40
題名:
python-requests-2.20.0-6.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- python-requests には、URL の解析処理に問題があるため、リモート
の攻撃者により、.netrc に保存された認証情報の漏洩を可能とする
脆弱性が存在します。(CVE-2024-47081)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2024-47081
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
追加情報:
N/A
ダウンロード:
SRPMS
- python-requests-2.20.0-6.el8_10.src.rpm
MD5: a5c25f4f99d1c9eb17cda7d7ef90b122
SHA-256: cd7b4418a503cd6cf3f446f953b3638659967bd67330b953da418e5d9d32e5a0
Size: 2.96 MB
Asianux Server 8 for x86_64
- python3-requests-2.20.0-6.el8_10.noarch.rpm
MD5: 347fd6fad11ebb84dcaf98c31faea2ee
SHA-256: 862ed61342ec4a8936484cb7ad33479dd79756405f05714e94f74e5c398d64c6
Size: 125.23 kB
English