[ubuntu/trusty-security] requests 2.2.1-1ubuntu0.1 (Accepted)

[Marc Deslauriers]

requests (2.2.1-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Authorization header disclosure on redirect
    - debian/patches/CVE-2014-1829.patch: if redirected, strip
      authentication header in requests/sessions.py, add
      should_bypass_proxies() to requests/utils.py.
    - CVE-2014-1829
  * SECURITY UPDATE: Proxy-Authorization header disclosure on redirect
    - debian/patches/CVE-2014-1830.patch: also strip proxy headers in
      requests/sessions.py, added test to test_requests.py.
    - CVE-2014-1830

Date: 2014-10-10 12:28:17.266455+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/trusty/+source/requests/2.2.1-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.