USN-8825-1: Requests vulnerability
Ubuntu's USN-8825-1 says Requests temporary-file handling could allow arbitrary code execution.
Ubuntu security notice USN-8825-1 says the Python Requests library did not correctly generate random temporary file paths. Ubuntu states an attacker could possibly use the issue to execute arbitrary code. The bulletin does not name a CVE or say the flaw is being exploited.
- USN-8825-1 covers temporary file path generation in Requests.
- Ubuntu says an attacker could possibly execute arbitrary code.
- The notice names no CVE and does not report exploitation.
From the original article
It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly use this issue to execute arbitrary code.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.