[Bug 1432555] Re: Please fix handling of cookies on redirect
Launchpad Bug Tracker
1432555 at bugs.launchpad.net
Mon Mar 16 12:52:27 UTC 2015
This bug was fixed in the package requests - 2.3.0-1ubuntu0.1
---------------
requests (2.3.0-1ubuntu0.1) utopic-security; urgency=medium
* SECURITY UPDATE: Session fixation and cookie stealing issue
(LP: #1432555).
- debian/patches/CVE-2015-2296.patch: extract cookies from the original
request (which still has the host which returned the cookies)
- CVE-2015-2296
-- Daniel Watkins <daniel.watkins at canonical.com> Mon, 16 Mar 2015 10:37:44 +0000
** Changed in: requests (Ubuntu Utopic)
Status: Confirmed => Fix Released
** Changed in: requests (Ubuntu Trusty)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to requests in Ubuntu.
https://bugs.launchpad.net/bugs/1432555
Title:
Please fix handling of cookies on redirect
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/requests/+bug/1432555/+subscriptions
More information about the Ubuntu-server-bugs
mailing list