Stay Secure with the Latest Linux Advisories

security advisoryFedoraSSL issue

Fedora: FEDORA-2015-9664 Moderate: python-requests SSLContext Issue

Inject pyOpenSSL. https://urllib3.readthedocs.io/en/latest/advanced-usage.html https://urllib3.readthedocs.io/en/latest/advanced-usage.html. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-9664 2015-06-09 09:02:04 -------------------------------------------------------------------------------- Name : python-requests Product : Fedora 21 Version : 2.7.0 Release : 1.fc21 URL : https://pypi.org/project/requests/ Summary : HTTP library, written in Python, for human beings Description : Most existing Python modules for sending HTTP requests are extremely verbose and cumbersome. Python’s built-in urllib2 module provides most of the HTTP capabilities you should need, but the API is thoroughly broken. This library is designed to make HTTP requests easy for developers. -------------------------------------------------------------------------------- Update Information: Inject pyOpenSSL. https://urllib3.readthedocs.io/en/latest/advanced-usage.html https://urllib3.readthedocs.io/en/latest/advanced-usage.html -------------------------------------------------------------------------------- ChangeLog: * Mon May 4 2015 Ralph Bean - 2.7.0-1 - new version * Wed Apr 29 2015 Ralph Bean - 2.6.2-1 - new version * Thu Apr 23 2015 Ralph Bean - 2.6.1-1 - new version * Wed Apr 22 2015 Ralph Bean - 2.6.0-1 - new version - Remove patch for CVE-2015-2296, now included in the upstream release. * Mon Mar 16 2015 Ralph Bean - 2.5.3-2 - Backport fix for CVE-2015-2296. * Thu Feb 26 2015 Ralph Bean - 2.5.3-1 - new version * Wed Feb 18 2015 Ralph Bean - 2.5.1-1 - new version * Tue Dec 16 2014 Ralph Bean - 2.5.0-3 - Pin python-urllib3 requirement at 1.10. - Fix requirement pinning syntax. * Thu Dec 11 2014 Ralph Bean - 2.5.0-2 - Do the most basic of tests in the check section. * Thu Dec 11 2014 Ralph Bean - 2.5.0-1 - Latest upstream, 2.5.0 for #1171068 * Wed Nov 5 2014 Ralph Bean - 2.4.3-1 - Latest upstream,2.4.3 for #1136283 * Wed Nov 5 2014 Ralph Bean - 2.3.0-4 - Re-do unbundling by symlinking system libs into the requests/packages/ dir. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1222024 - InsecurePlatformWarning: A true SSLContext object is not available https://bugzilla.redhat.com/show_bug.cgi?id=1222024 [ 2 ] Bug #1202077 - python-requests-2.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1202077 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-requests' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora's latest python-requests security enhancement tackles severe SSL context vulnerabilities and optimizes API performance.. python requests update, Fedora security advisory, SSL security fix. . LinuxSecurity.com Team

Jun 18, 2015 Fedora