- update to 2.20.1 (bsc#1111622):
  * fixes regressions in previous security update (CVE-2018-18074)
  - Fixed bug with unintended Authorization header stripping for
  redirects using default ports (http/80, https/443).

- Ensure neutrality of descriptions.

- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 < 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
      (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
      uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
      from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
      (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.

• Files Changed
• Browse Source