[SECURITY] Fedora 27 Update: python-requests-2.20.0-1.fc27
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-41320b315a
2018-11-14 02:55:20.588225
--------------------------------------------------------------------------------
Name : python-requests
Product : Fedora 27
Version : 2.20.0
Release : 1.fc27
URL : https://pypi.io/project/requests
Summary : HTTP library, written in Python, for human beings
Description :
Most existing Python modules for sending HTTP requests are extremely verbose and
cumbersome. Python���s built-in urllib2 module provides most of the HTTP
capabilities you should need, but the API is thoroughly broken. This library is
designed to make HTTP requests easy for developers.
--------------------------------------------------------------------------------
Update Information:
- Update to v2.20.0 - Includes fix for CVE-2018-18074
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 29 2018 Jeremy Cline <jeremy(a)jcline.org> - 2.20.0-1
- Update to v2.20.0
* Mon Apr 16 2018 Jeremy Cline <jeremy(a)jcline.org> - 2.18.4-2
- Stop injecting PyOpenSSL (rhbz 1567862)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1643830 - CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does
not remove Authorization header [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1643830
[ 2 ] Bug #1591531 - python-requests-2.19.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1591531
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-41320b315a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------