Wind River Support Network

HomeDefectsLIN1024-9566

Acknowledged

LIN1024-9566 : Security Advisory - python-requests - CVE-2024-47081

Created: Jun 10, 2025 Updated: Jul 4, 2025

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CREATE(Triage):(User=lchen-cn) CVE-2024-47081 (https://nvd.nist.gov/vuln/detail/CVE-2024-47081)