Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2019-2035

Опубликовано: 13 авг. 2019
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2019-2035: python-requests security update (LOW)

[2.6.0-5]

  • Fix CVE-2018-18074 Resolves: rhbz#1647368

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

python-requests

2.6.0-5.el7

Oracle Linux x86_64

python-requests

2.6.0-5.el7

Связанные CVE

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 6 лет назад

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

CVSS3: 2.6
redhat
почти 7 лет назад

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

CVSS3: 7.5
nvd
больше 6 лет назад

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

CVSS3: 7.5
debian
больше 6 лет назад

The Requests package before 2.20.0 for Python sends an HTTP Authorizat ...

suse-cvrf
почти 6 лет назад

Security update for python-requests