Red Hat Enterprise Linux (python-requests): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 5.6
  CVE-2024-35195

  Requests `Session` object does not verify requests after making first request with verify=False

  Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification r…

  psf requests katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  May 20, 2024

Revision history

1. 2026-10-15 #5

   Neue Updates von openSUSE aufgenommen

2. 2025-05-12 #4

   Neue Updates von Red Hat aufgenommen

3. 2025-05-01 #3

   Neue Updates von Amazon aufgenommen

4. 2025-04-09 #2

   Neue Updates von IBM aufgenommen

5. 2025-01-02 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2025:0012 vom 2025-01-02
  https://access.redhat.com/errata/RHSA-2025:0012
• Oracle Linux Security Advisory ELSA-2025-0012 vom 2025-01-03
  https://linux.oracle.com/errata/ELSA-2025-0012.html
• IBM Security Bulletin 7230557 vom 2025-04-10
  https://www.ibm.com/support/pages/node/7230557
• Amazon Linux Security Advisory ALAS-2025-2845 vom 2025-04-30
  https://alas.aws.amazon.com/AL2/ALAS-2025-2845.html
• Amazon Linux Security Advisory ALAS-2025-2846 vom 2025-04-30
  https://alas.aws.amazon.com/AL2/ALAS-2025-2846.html
• Red Hat Security Advisory RHSA-2025:7049 vom 2025-05-13
  https://access.redhat.com/errata/RHSA-2025:7049
• openSUSE Security Update OPENSUSE-SU-2026:12038-1 vom 2026-10-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7MTHVD2S6OTDDPCC5DGQFR6JXMKQ6N2D/