Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Fedora: FEDORA-2015-9664 Moderate: python-requests SSLContext Issue

fedora
Calendar Grey June 18, 2015
Scroller Fedora
Fedora's latest python-requests security enhancement tackles severe SSL context vulnerabilities and optimizes API performance.
Inject pyOpenSSL

Summary

Most existing Python modules for sending HTTP requests are extremely verbose and

cumbersome. Python’s built-in urllib2 module provides most of the HTTP

capabilities you should need, but the API is thoroughly broken. This library is

designed to make HTTP requests easy for developers.

Update Information:

Inject pyOpenSSL. https://urllib3.readthedocs.io/en/latest/advanced-usage.html https://urllib3.readthedocs.io/en/latest/advanced-usage.html

Topics%20covered

Topics Covered

security advisory Fedora SSL issue API security python-requests insecure platform

Change Log

* Mon May 4 2015 Ralph Bean - 2.7.0-1 - new version * Wed Apr 29 2015 Ralph Bean - 2.6.2-1 - new version * Thu Apr 23 2015 Ralph Bean - 2.6.1-1 - new version * Wed Apr 22 2015 Ralph Bean - 2.6.0-1 - new version - Remove patch for CVE-2015-2296, now included in the upstream release. * Mon Mar 16 2015 Ralph Bean - 2.5.3-2 - Backport fix for CVE-2015-2296. * Thu Feb 26 2015 Ralph Bean - 2.5.3-1 - new version * Wed Feb 18 2015 Ralph Bean - 2.5.1-1 - new version * Tue Dec 16 2014 Ralph Bean - 2.5.0-3 - Pin python-urllib3 requirement at 1.10. - Fix requirement pinning syntax. * Thu Dec 11 2014 Ralph Bean - 2.5.0-2 - Do the most basic of tests in the check section. * Thu Dec 11 2014 Ralph Bean - 2.5.0-1 - Latest upstream, 2.5.0 for #1171068 * Wed Nov 5 2014 Ralph Bean - 2.4.3-1 - Latest upstream, 2.4.3 for #1136283 * Wed Nov 5 2014 Ralph Bean - 2.3.0-4 - Re-do unbundling by symlinking system libs into the requests/packages/ dir.

References


[ 1 ] Bug #1222024 - InsecurePlatformWarning: A true SSLContext object is not available https://bugzilla.redhat.com/show_bug.cgi?id=1222024 [ 2 ] Bug #1202077 - python-requests-2.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1202077

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-requests' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: python-requests
Product: Fedora 21
Version: 2.7.0
Release: 1.fc21
URL: https://pypi.org/project/requests/
Summary: HTTP library, written in Python, for human beings

Topics%20covered

Topics Covered

security advisory Fedora SSL issue API security python-requests insecure platform

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.