From edf7731e666db9e5252b8736e61d50632e01faa4 Mon Sep 17 00:00:00 2001 From: Nate Prewitt Date: Thu, 18 Oct 2018 09:00:12 -0700 Subject: [PATCH] update vulnerability information --- docs/community/vulnerabilities.rst | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/docs/community/vulnerabilities.rst b/docs/community/vulnerabilities.rst index 7e299e36..ba3a9938 100644 --- a/docs/community/vulnerabilities.rst +++ b/docs/community/vulnerabilities.rst @@ -5,13 +5,13 @@ Vulnerability Disclosure If you think you have found a potential security vulnerability in requests, please email `sigmavirus24 `_ and -`Lukasa `_ directly. **Do not file a public issue.** +`Nate `_ directly. **Do not file a public issue.** Our PGP Key fingerprints are: - 0161 BB7E B208 B5E0 4FDC 9F81 D9DA 0A04 9113 F853 (@sigmavirus24) -- 90DC AE40 FEA7 4B14 9B70 662D F25F 2144 EEC1 373D (@lukasa) +- 8722 7E29 AD9C FF5C FAC3 EA6A 44D3 FF97 B80D C864 (@nateprewitt) If English is not your first language, please try to describe the problem and its impact to the best of your ability. For greater detail, please use your @@ -95,13 +95,16 @@ if upgrading is not an option. Previous CVEs ------------- +- Fixed in 2.20.0 + - `CVE 2018-18074 `_ + - Fixed in 2.6.0 - - `CVE 2015-2296 `_, + - `CVE 2015-2296 `_, reported by Matthew Daley of `BugFuzz `_. - Fixed in 2.3.0 - - `CVE 2014-1829 `_ + - `CVE 2014-1829 `_ - - `CVE 2014-1830 `_ + - `CVE 2014-1830 `_