Bug 1663101

Summary:	Please update it to >= 2.21.0
Product:	[Fedora] Fedora EPEL	Reporter:	Frank Büttner <bugzilla>
Component:	python-requests	Assignee:	Aurelien Bompard <aurelien>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	epel7	CC:	aurelien, cstratak, jeremy, philip.wyett
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-08-16 20:22:56 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1643829

Description Frank Büttner 2019-01-03 07:22:50 UTC

Description of problem:
The current version 2.12.5 is to old for the python vault module.

The old one looks like vulnerable: 
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-18074

Version-Release number of selected component (if applicable):
python34-requests-2.12.5-2.el7


Additional info:

Comment 1 Phil Wyett 2021-08-16 20:22:56 UTC

This package is part of RHEL, so would not be considered for EPEL.

If you wish to file an update request against RHEL, you can, but I doubt at this stage in the EL7 cycle an update like this would be done.