requests - Debian Package Tracker

general

source: requests (main)
version: 2.34.2-1
maintainer: Debian Python Team (DMD)
uploaders: Daniele Tricoli [DMD]
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.25.1+dfsg-2
oldstable: 2.28.1+dfsg-1
stable: 2.32.3+dfsg-5+deb13u1
testing: 2.34.2-1
unstable: 2.34.2-1

versioned links

2.25.1+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.28.1+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.32.3+dfsg-5+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.34.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

python-requests-doc
python3-requests (2 bugs: 0, 2, 0, 0)

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2026-09-02 Last update: 2026-09-17 07:00

3 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit f26495e4f392a03ee381e64eb24a79bf95aad3e9
Merge: df04ab0 45d80da
Author: Alexandre Detiste <alexandre.detiste@gmail.com>
Date:   Wed Sep 16 17:46:22 2026 +0200

    Merge branch 'debian/master' into 'debian/master'
    
    Add patches to fix autopkgtest failures
    
    See merge request python-team/packages/requests!7

commit 45d80da76df87be1a444f72f001f81ac9720cf40
Author: Grayson Wolf <grayson.wolf@canonical.com>
Date:   Wed Sep 16 10:37:35 2026 -0400

    d/p/0004-certs-Add-SKID-and-AKID-extensions.patch: Explicitly add {subject,authority}KeyIdentifier to certs

commit 36a3e599812b63e0845c468cfe90421bd4be6b1a
Author: Grayson Wolf <grayson.wolf@canonical.com>
Date:   Wed Sep 16 10:36:55 2026 -0400

    d/p/0003-help-Catch-AttributeError-from-urllib3-contrib-pyopenssl.patch: catch AttributeError from missing PROTOCOL_TLSv1

https://salsa.debian.org/api/v4/projects/python-team%2Fpackages%2Frequests API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2026-09-16 Last update: 2026-09-16 17:32

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-25645: (needs triaging) Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-03-26 Last update: 2026-09-01 22:00

debian/patches: 1 patch to forward upstream low

Among the 2 debian patches available in version 2.34.2-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-06-30 19:02

news

[rss feed]

[2026-08-31] requests 2.34.2-1 MIGRATED to testing (Debian testing watch)
[2026-06-30] Accepted requests 2.34.2-1 (source) into unstable (Carsten Schoenert)
[2026-06-30] requests 2.32.5+dfsg-2 MIGRATED to testing (Debian testing watch)
[2026-06-25] Accepted requests 2.32.5+dfsg-2 (source) into unstable (Alexandre Detiste)
[2026-03-08] Accepted requests 2.32.3+dfsg-5+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
[2025-09-13] requests 2.32.5+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-08-29] Accepted requests 2.32.5+dfsg-1 (source) into unstable (Colin Watson)
[2025-08-23] requests 2.32.4+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-08-18] Accepted requests 2.32.4+dfsg-1 (source) into unstable (Colin Watson)
[2025-04-17] requests 2.32.3+dfsg-5 MIGRATED to testing (Debian testing watch)
[2025-03-24] Accepted requests 2.32.3+dfsg-5 (source) into unstable (Bastian Germann) (signed by: bage@debian.org)
[2025-02-23] requests 2.32.3+dfsg-4 MIGRATED to testing (Debian testing watch)
[2025-02-17] Accepted requests 2.32.3+dfsg-4 (source) into unstable (Colin Watson)
[2025-02-17] Accepted requests 2.32.3+dfsg-3 (source) into experimental (Colin Watson)
[2024-11-24] Accepted requests 2.32.3+dfsg-2 (source) into experimental (Alexandre Detiste)
[2024-08-31] requests 2.32.3+dfsg-1 MIGRATED to testing (Debian testing watch)
[2024-06-13] Accepted requests 2.32.3+dfsg-1 (source) into unstable (Colin Watson)
[2024-05-19] requests 2.31.0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2024-05-16] Accepted requests 2.31.0+dfsg-2 (source) into unstable (Timo Röhling)
[2023-07-22] requests 2.31.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2023-07-17] Accepted requests 2.31.0+dfsg-1 (source) into unstable (Daniele Tricoli)
[2023-06-18] Accepted requests 2.21.0-1+deb10u1 (source) into oldoldstable (Markus Koschany)
[2022-11-26] requests 2.28.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2022-11-24] Accepted requests 2.28.1+dfsg-1 (source) into unstable (Daniele Tricoli)
[2022-03-31] requests 2.27.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2022-03-20] Accepted requests 2.27.1+dfsg-1 (source) into unstable (Daniele Tricoli)
[2021-01-06] requests 2.25.1+dfsg-2 MIGRATED to testing (Debian testing watch)
[2020-12-31] Accepted requests 2.25.1+dfsg-2 (source) into unstable (Daniele Tricoli)
[2020-12-31] Accepted requests 2.25.1+dfsg-1 (source) into unstable (Daniele Tricoli)
[2020-12-30] Accepted requests 2.25.0+dfsg-2 (source) into unstable (Daniele Tricoli)

bugs [bug history graph]

all: 9
RC: 0
I&N: 7
M&W: 2
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.34.2-1
10 bugs