Описание
ELSA-2019-2035: python-requests security update (LOW)
[2.6.0-5]
- Fix CVE-2018-18074 Resolves: rhbz#1647368
Обновленные пакеты
Oracle Linux 7
Oracle Linux aarch64
python-requests
2.6.0-5.el7
Oracle Linux x86_64
python-requests
2.6.0-5.el7
Связанные CVE
Связанные уязвимости
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
The Requests package before 2.20.0 for Python sends an HTTP Authorizat ...