[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2020:1792-1 -- SLES python3-requests, python3-certifi, python3-chardet, python3-urllib3

ID: oval:org.secpod.oval:def:89043820Date: (C)2021-03-05   (M)2022-09-22
Class: PATCHFamily: unix




This update for python3-requests provides the following fix: python-requests was updated to 2.20.1. Update to version 2.20.1: * Fixed bug with unintended Authorization header stripping for redirects using default ports . Update to version 2.20.0: * Bugfixes + Content-Type header parsing is now case-insensitive . + Fixed exception leak where certain redirect urls would raise uncaught urllib3 exceptions. + Requests removes Authorization header from requests redirected from https to http on the same hostname. + should_bypass_proxies now handles URIs without hostnames . Update to version 2.19.1: * Fixed issue where status_codes.py #226; #128; #153;s init function failed trying to append to a __doc__ value of None. Update to version 2.19.0: * Improvements + Warn about possible slowdown with cryptography version lt; 1.3.4 + Check host in proxy URL, before forwarding request to adapter. + Maintain fragments properly across redirects. + Removed use of cgi module to expedite library load time. + Added support for SHA-256 and SHA-512 digest auth algorithms. + Minor performance improvement to Request.content. * Bugfixes + Parsing empty Link headers with parse_header_links no longer return one bogus entry. + Fixed issue where loading the default certificate bundle from a zip archive would raise an IOError. + Fixed issue with unexpected ImportError on windows system which do not support winreg module. + DNS resolution in proxy bypass no longer includes the username and password in the request. This also fixes the issue of DNS queries failing on macOS. + Properly normalize adapter prefixes for url comparison. + Passing None as a file pointer to the files param no longer raises an exception. + Calling copy on a RequestsCookieJar will now preserve the cookie policy correctly. Update to version 2.18.4: * Improvements + Error messages for invalid headers now include the header name for easier debugging Update to version 2.18.3: * Improvements + Running $ python -m requests.help now includes the installed version of idna. * Bugfixes + Fixed issue where Requests would raise ConnectionError instead of SSLError when encountering SSL problems when using urllib3 v1.22. - Add ca-certificates to dependencies, otherwise https connections will fail.

Platform:
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP4
Product:
python3-requests
python3-certifi
python3-chardet
python3-urllib3
Reference:
SUSE-SU-2020:1792-1
CVE-2015-2296
CVE-2018-18074
CVE    2
CVE-2015-2296
CVE-2018-18074

© SecPod Technologies