SUSE-SU-2022:1819-1

MEDIUM5.9

Security update for python-requests

Published May 23, 2022

Modified 4 years ago

Fix available

Details

Description of the patch:

This update for python-requests fixes the following issues:

CVE-2018-18074: Fixed to prevent the package to send an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect. (bsc#1111622)

Affected Packages

python-requests

SUSE Linux Enterprise High Availability Extension 12 SP3SUSE Linux Enterprise High Availability Extension 12 SP4SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Server 12

Fixed in:

2.11.1-6.31.1

python3-requests

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

2.11.1-6.31.1

References

ADVISORY

https://bugzilla.suse.com/1111622

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-May/011137.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-18074/

WEB

https://www.suse.com/support/security/rating/

ADVISORY