SUSE-SU-2025:20094-1

Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520094-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20094-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20094-1
Upstream
Related
Published
2025-02-03T09:12:11Z
Modified
2026-03-11T07:29:40Z
Summary
Security update for python-requests
Details

This update for python-requests contains the following fixes:

  • Add patch to fix to inject the default CA bundles if they are not specified. (bsc#1226321, bsc#1231500)

  • Remove Requires on python-py, it should have been removed earlier.

  • update to 2.32.3:

    • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter.

    • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module.

    • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is

    • Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification,

    • verify=True now reuses a global SSLContext which should improve request time

    • Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their

References

Affected packages

SUSE:Linux Micro 6.0 / python-requests

Package

Name
python-requests
Purl
pkg:rpm/suse/python-requests&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32.3-1.1

Ecosystem specific

{
    "binaries":  [
        {
            "python311-requests":  "2.32.3-1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20094-1.json"