Summary
[2.20.0-5]
- Security fix for CVE-2024-35195
Resolves: RHEL-37605
[2.20.0-4]
- Bump release to fix upgrade path
from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8
Related: rhbz#2209469
[2.20.0-3]
- Security fix for CVE-2023-32681
Resolves: rhbz#2209469
[2.20.0-2]
- Properly handle default ports when stripping the authorization header
Resolves: rhbz#1752799
[2.20.0-1]
- Update to v2.20.0 for CVE-2018-18074.
[2.19.1-4]
- Remove the Python 2 subpackage
https://bugzilla.redhat.com/show_bug.cgi?id=1590396
[2.19.1-3]
- Allow build with Python 2
[2.19.1-2]
- Remove the python-pytest-cov dependency
[2.19.1-1]
- Update to v2.19.1 (rhbz 1591531)
[2.19.0-1]
- Update to v2.19.0 (rhbz 1590508)
[2.18.4-6]
- Skip all tests needing httpbin: httpbin has too many dependencies to be
shipped in RHEL just for build-time package tests
[2.18.4-5]
- BR idna, or the tests fail to start
[2.18.4-4]
- Stop injecting PyOpenSSL (rhbz 1567862)
[2.18.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[2.18.4-2]
- Fix ambiguous Python 2 dependency declarations
(See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
[2.18.4-1]
- Update to 2.18.4
[2.18.2-1]
- Update to 2.18.2
[2.18.1-2]
- Drop the dependency on certifi in setup.py
[2.18.1-1]
- Update to 2.18.1 (#1449432)
- Remove tests that require non-local network (#1450608)
[2.14.2-1]
- Update to 2.14.2 (#1449432)
- Switch to autosetup to apply patches
[2.13.0-2]
- Don't run tests when building as a module
[2.13.0-1]
- Update to 2.13.0 (#1418138)
[2.12.4-3]
- Include and enable tests (now python-pytest-httpbin is packaged)
[2.12.4-2]
- Rebuild for Python 3.6 again.
[2.12.4-1]
- Update to 2.12.4. Fixes #1404680
[2.12.3-2]
- Rebuild for Python 3.6
[2.12.3-1]
- Update to 2.12.3. Fixes #1400601
[2.12.2-1]
- Update to 2.12.2
[2.12.1-2]
- Backport #3713. Fixes #1397149
[2.12.1-1]
- Update to 2.12.1. Fixes #1395469
- Unbundle idna, a new upstream dependency
[2.11.1-1]
- Update to 2.11.1. Fixes #1370814
[2.11.0-1]
- Update to 2.11.0. Fixes #1365332
[2.10.0-4]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
[2.10.0-3]
- Update python2 packaging.
[2.10.0-2]
- Fix python2 subpackage to comply with guidelines.
[2.9.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
[2.9.1-1]
- new version
[2.9.0-1]
- new version
[2.8.1-1]
- Latest upstream.
- Bump hard dep on urllib3 to 1.12.
[2.7.0-8]
- Rebuilt for Python3.5 rebuild
[2.7.0-7]
- Tell setuptools about what version of urllib3 we're unbundling
for https://github.com/kennethreitz/requests/issues/2816
[2.7.0-6]
- Replace the provides macro with a plain provides field for now until we can
re-organize this package into two different subpackages.
[2.7.0-5]
- Remove 'provides: python2-requests' from the python3 subpackage, obviously.
[2.7.0-4]
- Employ %python_provides macro to provide python2-requests.
[2.7.0-3]
- Lock down the python-urllib3 version to the specific version we unbundled.
https://bugzilla.redhat.com/show_bug.cgi?id=1253823
[2.7.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
[2.7.0-1]
- new version
[2.6.2-1]
- new version
[2.6.1-1]
- new version
[2.6.0-1]
- new version
- Remove patch for CVE-2015-2296, now included in the upstream release.
[2.5.3-2]
- Backport fix for CVE-2015-2296.
[2.5.3-1]
- new version
[2.5.1-1]
- new version
[2.5.0-3]
- Pin python-urllib3 requirement at 1.10.
- Fix requirement pinning syntax.
[2.5.0-2]
- Do the most basic of tests in the check section.
[2.5.0-1]
- Latest upstream, 2.5.0 for #1171068
[2.4.3-1]
- Latest upstream, 2.4.3 for #1136283
[2.3.0-4]
- Re-do unbundling by symlinking system libs into the requests/packages/ dir.
[2.3.0-3]
- fix license handling
[2.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
[2.3.0-1]
- Latest upstream
[2.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
[2.0.0-1]
- Latest upstream.
- Add doc macro to the python3 files section.
- Require python-urllib3 greater than or at 1.7.1.
[1.2.3-5]
- fix versioned dep on python-urllib3
[1.2.3-4]
- Explicitly versioned the requirements on python-urllib3.
[1.2.3-3]
- Release bump for a coupled update with python-urllib3.
[1.2.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
[1.2.3-1]
- Latest upstream.
- Fixed bogus date in changelog.
[1.1.0-4]
- Correct a rhel conditional on python-ordereddict
[1.1.0-3]
- Unbundled python-urllib3. Using system python-urllib3 now.
- Conditionally include python-ordereddict for el6.
[1.1.0-2]
- Unbundled python-charade/chardet. Using system python-chardet now.
- Removed deprecated comments and actions against oauthlib unbundling.
Those are no longer necessary in 1.1.0.
- Added links to bz tickets over Patch declarations.
[1.1.0-1]
- Latest upstream.
- Relicense to ASL 2.0 with upstream.
- Removed cookie handling patch (fixed in upstream tarball).
- Updated cert unbundling patch to match upstream.
- Added check section, but left it commented out for koji.
[0.14.1-4]
- Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
by removing them from the python{,3}-requests package that they did not belong
in.
- Use the certificates in the ca-certificates package instead of the bundled one
+ https://bugzilla.redhat.com/show_bug.cgi?id=904614
- Fix a problem with cookie handling
+ https://bugzilla.redhat.com/show_bug.cgi?id=906924
[ 0.14.1-1]
- Updated to latest upstream release
[0.13.1-1]
- Updated to latest upstream release 0.13.1
- Use system provided ca-certificates
- No more async requests use grrequests https://github.com/kennethreitz/grequests
- Remove gevent as it is no longer required by requests
[0.11.1-1]
- Updated to upstream release 0.11.1
[0.10.6-3]
- Support building package for EL6
[0.10.6-2]
- +python3-requests pkg
[0.10.6-1]
- Updated to new upstream version
[0.9.3-1]
- Updated
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-requests | 0:2.20.0-5.el8_10 |
Vulnerabilities 1
-
Medium 5.6
Requests `Session` object does not verify requests after making first request with verify=False
Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification r…