UbuntuUpdates.org

Package "requests"

Name: requests

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • elegant and simple HTTP library for Python (Documentation)
  • elegant and simple HTTP library for Python3, built for human beings
Latest version: 2.31.0+dfsg-1ubuntu1.2
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "requests" in Noble

Repository Area Version
base main 2.31.0+dfsg-1ubuntu1
updates main 2.31.0+dfsg-1ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.31.0+dfsg-1ubuntu1.2 2026-09-28 01:07:19 UTC

requests (2.31.0+dfsg-1ubuntu1.2) noble-security; urgency=medium

  * SECURITY UPDATE: Insecure Temporary File
    - debian/patches/CVE-2026-25645.patch: Extract to non-deterministic
      location
    - CVE-2026-25645

 -- Bruce Cable Wed, 23 Sep 2026 13:12:59 +1000
Source diff to previous version
CVE-2026-25645 Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when ex

Version: 2.31.0+dfsg-1ubuntu1.1 2025-06-16 03:07:04 UTC

  requests (2.31.0+dfsg-1ubuntu1.1) noble-security; urgency=medium

  * SECURITY UPDATE: Information Leak
    - debian/patches/CVE-2024-47081.patch: Only use hostname to do netrc
      lookup instead of netloc
    - CVE-2024-47081
  * Skip Test
    - skip-failing-zip-test.patch: Skip failing zip test

 -- Bruce Cable <email address hidden> Thu, 12 Jun 2025 11:19:32 +1000
CVE-2024-47081 Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific m


About   -   Send Feedback to @ubuntu_updates