tree fa517020fc198a154fdc92e52aa80ac8ac24d4ce
parent 1e560174afea6600dc43a02fcb1bbaca53e73533
author David Pursehouse <dpursehouse@collab.net> 1541415013 +0900
committer David Pursehouse <dpursehouse@collab.net> 1541415013 +0900

CVE-2018-18074: Upgrade requests to 2.19.1

Fixes CVE-2018-18074 [1]:

  The Requests package through 2.19.1 before 2018-09-14 for Python
  sends an HTTP Authorization header to an http URI upon receiving
  a same-hostname https-to-http redirect, which makes it easier for
  remote attackers to discover credentials by sniffing the network.

[1] https://nvd.nist.gov/vuln/detail/CVE-2018-18074

Change-Id: I064de6beb227e40ae4904e1bd23b297da9626f49