{"push_id":3145252982,"size":3,"distinct_size":3,"ref":"refs/heads/2018.02.x","head":"d4d7cc99083612ca42265967fccb423377672e2d","before":"c0a646fd29bb45a797b3bc6269dfa4d8bda5f31e","commits":[{"sha":"35f0fba38cf953fd24d7403ae2bc9116eec4553f","author":{"name":"Bernd Kuhls","email":"252225071f0557fd87dd8ce10cf4412555808d89@t-online.de"},"message":"package/python-requests: bump version to 2.19.1\n\nUpdated package using scanpypi, added license hash.\n\nSigned-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>\nSigned-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>\n(cherry picked from commit 217fa315abca43579bb47637881fe4127da6584b)\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>","distinct":true,"url":"https://api.github.com/repos/woodsts/buildroot/commits/35f0fba38cf953fd24d7403ae2bc9116eec4553f"},{"sha":"fa75b099568d3b183cd4d3c62f5b1def98cdc4f0","author":{"name":"Asaf Kahlon","email":"64ca4990975254f2ecfadedee58f18409579ee17@gmail.com"},"message":"python-requests: security bump to version 2.20.0\n\nFixes CVE-2018-18074: The Requests package before 2.20.0 for Python sends an\nHTTP Authorization header to an http URI upon receiving a same-hostname\nhttps-to-http redirect, which makes it easier for remote attackers to\ndiscover credentials by sniffing the network.\n\nLICENSE update: replaced http address with https.\n\nSigned-off-by: Asaf Kahlon <asafka7@gmail.com>\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>\n(cherry picked from commit 42bebd1e7ce07608967c36e2877f578f4c143e5c)\n[Peter: mention security impact]\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>","distinct":true,"url":"https://api.github.com/repos/woodsts/buildroot/commits/fa75b099568d3b183cd4d3c62f5b1def98cdc4f0"},{"sha":"d4d7cc99083612ca42265967fccb423377672e2d","author":{"name":"Asaf Kahlon","email":"64ca4990975254f2ecfadedee58f18409579ee17@gmail.com"},"message":"python-requests: bump to version 2.20.1\n\nFixes a bug introduced in 2.20.0 with unintended Authorization header\nstripping for redirects using default ports (http/80, https/443).\n\nSigned-off-by: Asaf Kahlon <asafka7@gmail.com>\nSigned-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>\n(cherry picked from commit 745132abc05e9cb81b0015a1303a602437f0a06f)\n[Peter: mention fix from 2.20.0]\nSigned-off-by: Peter Korsgaard <peter@korsgaard.com>","distinct":true,"url":"https://api.github.com/repos/woodsts/buildroot/commits/d4d7cc99083612ca42265967fccb423377672e2d"}]}
{"actor":{"display_login":"woodsts"}}