CVE-2024-35195

python-docker: This update for python-docker fixes the following issues: - CVE-2024-35195: Fixed missing certificate verification (...

CVE-2024-35195 is fixed in 14 products on 1 platform, first by DEBIAN-CVE-2024-35195, released May 20, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.6
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0034
27th percentile

This update for python-docker fixes the following issues: - CVE-2024-35195: Fixed missing certificate verification (bsc#1224788).

Where it's fixed

ProductFixed inFixReleased
Linux
aws-cfn-bootstrap · amzn 2023 2.0-31.amzn2023 ALAS2023-2024-732 Oct 10, 2024
python-docker · opensuse-leap 15.6 7.0.0-150400.8.7.1 SUSE-SU-2024:1937-2 Jul 8, 2024
python-docker · sles 15.6 7.0.0-150400.8.7.1 SUSE-SU-2024:1937-2 Jul 8, 2024
python-requests · opensuse-leap 15.6 2.31.0-150400.6.15.1 SUSE-RU-2024:3600-1 Oct 11, 2024
python-requests · rocky 8 0:2.20.0-5.el8_10 RLSA-2025:0012 Jan 8, 2025
python-requests · rocky 9 0:2.25.1-9.el9 RLSA-2025:7049 Oct 4, 2025
python-requests · sles 15.6 2.31.0-150400.6.15.1 SUSE-RU-2024:3600-1 Oct 11, 2024
python3-pip · Ubuntu 22.04.1 LTS (jammy) 22.0.2+dfsg-1ubuntu0.7+esm1 python3-pip 22.0.2+dfsg-1ubuntu0.7+esm1 Dec 5, 2025
python3-pip · Ubuntu 24.04.5 LTS (noble) 24.0+dfsg-1ubuntu1.3+esm1 python3-pip 24.0+dfsg-1ubuntu1.3+esm1 Dec 5, 2025
python3-pip · amzn 2023 21.3.1-2.amzn2023.0.10 ALAS2023-2024-781 Dec 5, 2024
python3-pip-wheel · amzn 2023 21.3.1-2.amzn2023.0.10 ALAS2023-2024-781 Dec 5, 2024
python3-pip-whl · Ubuntu 22.04.1 LTS (jammy) 22.0.2+dfsg-1ubuntu0.7+esm1 python3-pip-whl 22.0.2+dfsg-1ubuntu0.7+esm1 Dec 5, 2025
python3-pip-whl · Ubuntu 24.04.5 LTS (noble) 24.0+dfsg-1ubuntu1.3+esm1 python3-pip-whl 24.0+dfsg-1ubuntu1.3+esm1 Dec 5, 2025
python3-requests · RHEL 8 0:2.20.0-5.el8_10 RHSA-2025:0012 Jan 2, 2025
python3-requests · RHEL 9 0:2.25.1-9.el9 RHSA-2025:7049 May 13, 2025
python3-requests · Ubuntu 24.10 (oracular) 2.32.3+dfsg-1ubuntu1 python3-requests 2.32.3+dfsg-1ubuntu1 Jan 16, 2026
python3-requests · Ubuntu 25.04 (plucky) 2.32.3+dfsg-1ubuntu1 python3-requests 2.32.3+dfsg-1ubuntu1 Jan 16, 2026
python3-requests · almalinux 8 2.20.0-5.el8_10 ALSA-2025:0012 Jan 2, 2025
python3-requests · almalinux 9 2.25.1-9.el9 ALSA-2025:7049 May 13, 2025
python3-requests · amzn 2023 2.25.1-1.amzn2023.0.4 ALAS2023-2024-782 Dec 5, 2024
python3-requests · ol 8 0:2.20.0-5.el8_10 ELSA-2025-0012 Jan 2, 2025
python3-requests · ol 9 0:2.25.1-9.el9 ELSA-2025-7049 May 16, 2025
python3-requests+security · RHEL 9 0:2.25.1-9.el9 RHSA-2025:7049 May 13, 2025
python3-requests+security · almalinux 9 2.25.1-9.el9 ALSA-2025:7049 May 13, 2025
python3-requests+security · amzn 2023 2.25.1-1.amzn2023.0.4 ALAS2023-2024-782 Dec 5, 2024
python3-requests+security · ol 9 0:2.25.1-9.el9 ELSA-2025-7049 May 16, 2025
python3-requests+socks · RHEL 9 0:2.25.1-9.el9 RHSA-2025:7049 May 13, 2025
python3-requests+socks · almalinux 9 2.25.1-9.el9 ALSA-2025:7049 May 13, 2025
python3-requests+socks · amzn 2023 2.25.1-1.amzn2023.0.4 ALAS2023-2024-782 Dec 5, 2024
python3-requests+socks · ol 9 0:2.25.1-9.el9 ELSA-2025-7049 May 16, 2025
python3.11-pip · amzn 2023 22.3.1-2.amzn2023.0.5 ALAS2023-2024-780 Dec 5, 2024
python3.11-pip-wheel · amzn 2023 22.3.1-2.amzn2023.0.5 ALAS2023-2024-780 Dec 5, 2024
python3.12-pip · amzn 2023 23.2.1-4.amzn2023.0.2 ALAS2023-2025-957 Apr 23, 2025
python3.12-pip-wheel · amzn 2023 23.2.1-4.amzn2023.0.2 ALAS2023-2025-957 Apr 23, 2025
requests · Debian 13.5 (trixie) 2.32.3+dfsg-1 DEBIAN-CVE-2024-35195 May 20, 2024
requests · Debian 14 2.32.3+dfsg-1 DEBIAN-CVE-2024-35195 May 20, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.