Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1754-1

Опубликовано: 20 июл. 2019
Источник: suse-cvrf

Описание

Security update for python-requests

This update for python-requests to version 2.20.1 fixes the following issues:

Security issue fixed:

  • CVE-2018-18074: Fixed an information disclosure vulnerability of the HTTP Authorization header (bsc#1111622).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.1
python2-requests-2.20.1-lp151.2.3.1
python2-requests-test-2.20.1-lp151.2.3.1
python3-requests-2.20.1-lp151.2.3.1
python3-requests-test-2.20.1-lp151.2.3.1

Ссылки

Описание

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

Затронутые продукты
openSUSE Leap 15.1:python2-requests-2.20.1-lp151.2.3.1
openSUSE Leap 15.1:python2-requests-test-2.20.1-lp151.2.3.1
openSUSE Leap 15.1:python3-requests-2.20.1-lp151.2.3.1
openSUSE Leap 15.1:python3-requests-test-2.20.1-lp151.2.3.1
Ссылки