Skip to content
OpenAdvisories
Medium RHSA-2023:4350 1 CVE

Red Hat Security Advisory: python-requests security update

Published Sep 13, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-requests+security 0:2.25.1-7.el9_2
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-requests+socks 0:2.25.1-7.el9_2
Red Hat · RHEL 9 enterprise_linux:9::baseos python-requests 0:2.25.1-7.el9_2
Red Hat · RHEL 9 enterprise_linux:9::baseos python3-requests 0:2.25.1-7.el9_2

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-32681 Public exploit

    Unintended leak of Proxy-Authorization header in requests

    Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header…

    psf requests python-pip requests Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2209469
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4350.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-32681
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-32681
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-32681
  • article
    https://github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q