Skip to content
OpenAdvisories
High ALBA-2019:3693 1 CVE

python-requests bug fix update

Published Nov 5, 2019 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The python-requests package contains a library designed to make HTTP requests easy for developers.

Bug fix:

* The fix CVE-2018-18074 leads to a regression (BZ#1758261)

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 8 python3-requests 2.20.0-2.1.el8_1

Vulnerabilities 1

  • High 7.5
    CVE-2018-18074 Public exploit

    Insufficiently Protected Credentials in Requests

    The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

    python-pip requests requests requests Debian Ubuntu PyPI