Skip to content
OpenAdvisories
Medium RHSA-2024:0299 1 CVE

Red Hat Security Advisory: python-requests security update

Published Sep 13, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::baseos python-requests 0:2.20.0-3.el8_6
Red Hat · RHEL 8.6 EUS rhel_eus:8.6::baseos python3-requests 0:2.20.0-3.el8_6

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-32681 Public exploit

    Unintended leak of Proxy-Authorization header in requests

    Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header…

    psf requests python-pip requests Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2209469
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0299.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-32681
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-32681
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-32681
  • article
    https://github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q