Ubuntu
requests package

  1. Bug #1432555
  2. Comment #7

Comment 7 for bug 1432555

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package requests - 2.3.0-1ubuntu0.1

---------------
requests (2.3.0-1ubuntu0.1) utopic-security; urgency=medium

  * SECURITY UPDATE: Session fixation and cookie stealing issue
    (LP: #1432555).
    - debian/patches/CVE-2015-2296.patch: extract cookies from the original
      request (which still has the host which returned the cookies)
    - CVE-2015-2296
 -- Daniel Watkins <email address hidden> Mon, 16 Mar 2015 10:37:44 +0000