requests (2.2.1-1ubuntu0.1) trusty-security; urgency=medium
* SECURITY UPDATE: Authorization header disclosure on redirect
- debian/patches/CVE-2014-1829.patch: if redirected, strip
authentication header in requests/sessions.py, add
should_bypass_proxies() to requests/utils.py.
- CVE-2014-1829
* SECURITY UPDATE: Proxy-Authorization header disclosure on redirect
- debian/patches/CVE-2014-1830.patch: also strip proxy headers in
requests/sessions.py, added test to test_requests.py.
- CVE-2014-1830
Date: 2014-10-10 12:28:17.266455+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/trusty/+source/requests/2.2.1-1ubuntu0.1
Sorry, changesfile not available.
--
Trusty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes
