Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-9170

Низкий

ALT-PU-2025-9170: package python3-module-requests update to version 2.32.4-alt1

Источник
errata.altlinux.org
Дата публикации
17.07.2025
Дата обновления
04.02.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades python3-module-requests to version 2.32.4-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 1 года назад

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVSS3: 5.3
redhat
больше 1 года назад

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVSS3: 5.3
nvd
больше 1 года назад

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVSS3: 5.3
msrc
9 месяцев назад

Requests vulnerable to .netrc credentials leak via malicious URLs

CVSS3: 5.3
debian
больше 1 года назад

Requests is a HTTP library. Due to a URL parsing issue, Requests relea ...