Merge pull request #1989 from sigmavirus24/HISTORY-updates

Make note of the fact that we fixed some CVEs
2026-06-05 22:50:18 +00:00 · 2014-04-03 06:51:07 +01:00
parent ae5ecdf2ae b361a4c056
commit 6a877661fb
1 changed files with 5 additions and 0 deletions
@@ -14,6 +14,11 @@ Release History
 - The ``timeout`` parameter now affects requests with both ``stream=True`` and
  ``stream=False`` equally.

+**Bugfixes**
+
+- No longer expose Authorization or Proxy-Authorization headers on redirect.
+  Fix CVE-2014-1829 and CVE-2014-1830 respectively.
+
 2.2.1 (2014-01-23)
 ++++++++++++++++++