ROS-20250703-11

A vulnerability in the HTTP Requests library of the Python Requests programming language is related to the fact that the library passes .netrc credentials to third parties for certain malicious URLs. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data...

OPENSUSE-SU-2025:15281-1 python311-requests-2.32.4-1.1 on GA media

These are all security issues fixed in the python311-requests-2.32.4-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for python-requests

This update for python-requests fixes the following issues: CVE-2024-47081: fixes netrc credential leak bsc1244039. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed...

SUSE-SU-2025:02205-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-47081: fixes netrc credential leak bsc1244039...

SUSE-SU-2025:20455-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-47081: Fixed incorrect URL processing leading to .netrc credential leak bsc1244039...

Security update for python-requests

This update for python-requests fixes the following issues: CVE-2024-47081: Fixed incorrect URL processing leading to .netrc credential leak bsc1244039 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE SLED15 / SLES15 Security Update : python-requests (SUSE-SU-2025:01998-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:01998-1 advisory. - CVE-2024-47081: fixed netrc credential leak bsc1244039. Tenable has extracted the preceding description block direct...

SUSE SLES12 Security Update : python-requests (SUSE-SU-2025:01999-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01999-1 advisory. - CVE-2024-47081: fixed netrc credential leak bsc1244039. Tenable has extracted the preceding description block directly from the SUSE...

Amazon Linux 2 : python-requests (ALAS-2025-2907)

The version of python-requests installed on the remote host is prior to 2.6.0-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2907 advisory. Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

Medium: python3-requests

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

SUSE: Security Advisory (SUSE-SU-2025:01998-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:01999-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-47081: fixed netrc credential leak bsc1244039...

Security update for python-requests

This update for python-requests fixes the following issues: CVE-2024-47081: fixed netrc credential leak bsc1244039. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed...

SUSE-SU-2025:01998-1 Security update for python-requests

This update for python-requests fixes the following issues: - CVE-2024-47081: fixed netrc credential leak bsc1244039...

TencentOS Server 4: python-requests (TSSA-2024:0919)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0919 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

AZL-63747 CVE-2024-47081 affecting package python-requests for versions less than 2.31.0-3

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...