Ubuntu 23.04 LTS USN-6155-1 Critical: Requests Info Exposure

ubuntu

June 12, 2023

Requests could be made to expose sensitive information over the network.

Summary

Requests could be made to expose sensitive information over the network.

Software Description:

- requests: elegant and simple HTTP library for Python

Details:

Dennis Brinkrolf and Tobias Funke discovered that Requests incorrectly

leaked Proxy-Authorization headers. A remote attacker could possibly use

this issue to obtain sensitive information.

Topics Covered

security advisory critical remote access ubuntu info exposure requests

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
   python3-requests                2.28.1+dfsg-1ubuntu1.1

Ubuntu 22.10:
   python3-requests                2.27.1+dfsg-1ubuntu2.1

Ubuntu 22.04 LTS:
   python3-requests                2.25.1+dfsg-2ubuntu0.1

Ubuntu 20.04 LTS:
   python3-requests                2.22.0-2ubuntu1.1

In general, a standard system update will make all the necessary changes.