* SECURITY UPDATE: Session fixation and cookie stealing issue
(LP: #1432555).
- debian/patches/CVE-2015-2296.patch: extract cookies from the original
request (which still has the host which returned the cookies)
- CVE-2015-2296
-- Daniel Watkins <email address hidden> Mon, 16 Mar 2015 10:37:44 +0000
This bug was fixed in the package requests - 2.3.0-1ubuntu0.1
---------------
requests (2.3.0-1ubuntu0.1) utopic-security; urgency=medium
* SECURITY UPDATE: Session fixation and cookie stealing issue patches/ CVE-2015- 2296.patch: extract cookies from the original
(LP: #1432555).
- debian/
request (which still has the host which returned the cookies)
- CVE-2015-2296
-- Daniel Watkins <email address hidden> Mon, 16 Mar 2015 10:37:44 +0000