OESA-2025-2809

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2809
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2809.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-2809
Upstream
Published
2025-12-12T12:20:20Z
Modified
2025-12-12T12:44:49.060310Z
Summary
python-requests security update
Details

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work (even method overrides) to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. + Multipart File Uploads. + CookieJar Support. + Redirection History. + Redirection Recursion Urllib Fix. + Automatic Decompression of GZipped Content. + Unicode URL Support. - Authentication: + URL + HTTP Auth Registry.

Security Fix(es):

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verify. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.(CVE-2024-35195)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / python-requests

Package

Name
python-requests
Purl
pkg:rpm/openEuler/python-requests&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.24.0-5.oe2003sp4

Ecosystem specific 

{
    "src": [
        "python-requests-2.24.0-5.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "python-requests-help-2.24.0-5.oe2003sp4.noarch.rpm",
        "python2-requests-2.24.0-5.oe2003sp4.noarch.rpm",
        "python3-requests-2.24.0-5.oe2003sp4.noarch.rpm"
    ]
}