Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

requests: CVE-2018-18074 #1419

Closed
1 task done
l2dy opened this issue Oct 17, 2018 · 3 comments
Closed
1 task done

requests: CVE-2018-18074 #1419

l2dy opened this issue Oct 17, 2018 · 3 comments
Labels
security Topic/issue involves a security issue/fixed

Comments

@l2dy
Copy link
Member

l2dy commented Oct 17, 2018 •
edited by MingcongBai
Loading

CVE IDs: CVE-2018-18074

Other security advisory IDs: USN-3790-1

Descriptions:
Requests could be made to expose sensitive information if it
received a specially crafted HTTP header.

Patches: psf/requests@c45d7c4

PoC(s): psf/requests#4716

Architectural progress:

  • Data/architecture-independent (noarch)
@l2dy l2dy added the security Topic/issue involves a security issue/fixed label Oct 17, 2018
MingcongBai added a commit that referenced this issue Oct 23, 2018
@MingcongBai
requests: #1419 (noarch)
dcb2123 
- Fix CA Certifications patch.
- Remove some invalid prepare lines...
@MingcongBai
Copy link
Member

Fixed with dcb2123. Closing.

@MingcongBai
Copy link
Member

Fixed with dcb2123. Closing.

@l2dy
Copy link
Member Author

l2dy commented Oct 24, 2018

Use AOSA-2018-0428.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security Topic/issue involves a security issue/fixed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@MingcongBai @l2dy