Update to 2.32.4

- Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
This commit is contained in:
Miro Hrončok 2025-07-07 12:12:42 +02:00
commit 8607c2fb65
8 changed files with 11 additions and 804 deletions

View file

@ -1,7 +1,7 @@
From bb733473e91e71b812ada46bc110f607630f9327 Mon Sep 17 00:00:00 2001
From e0ce6c20989a205489df47f8abaff5369ed588ca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Hrn=C4=8Diar?= <thrnciar@redhat.com>
Date: Thu, 30 May 2024 11:10:29 +0200
Subject: [PATCH 1/2] system certs
Subject: [PATCH] system certs
Co-authored-by: Lumir Balhar <lbalhar@redhat.com>
---
@ -23,17 +23,17 @@ index 8d44e0e..fa10a53 100644
idna>=2.5,<4
urllib3>=1.21.1,<3
diff --git a/setup.py b/setup.py
index 1b0eb37..03d19b0 100755
index 7d9b52b..17da826 100755
--- a/setup.py
+++ b/setup.py
@@ -62,7 +62,6 @@ requires = [
@@ -37,7 +37,6 @@ requires = [
"charset_normalizer>=2,<4",
"idna>=2.5,<4",
"urllib3>=1.21.1,<3",
- "certifi>=2017.4.17",
]
test_requirements = [
"pytest-httpbin==2.0.0",
"pytest-httpbin==2.1.0",
diff --git a/src/requests/certs.py b/src/requests/certs.py
index be422c3..9aee713 100644
--- a/src/requests/certs.py
@ -55,5 +55,5 @@ index be422c3..9aee713 100644
if __name__ == "__main__":
print(where())
--
2.45.1
2.50.0