Wind River Support Network

HomeDefectsLIN1021-16019

Acknowledged

LIN1021-16019 : Security Advisory - python-requests - CVE-2024-47081

Created: Jun 10, 2025 Updated: Jun 13, 2025

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CREATE(Triage):(User=lchen-cn) CVE-2024-47081 (https://nvd.nist.gov/vuln/detail/CVE-2024-47081)