requests (2.2.1-1ubuntu0.4) trusty-security; urgency=medium

  * SECURITY UPDATE: Creadentials through HTTP Authorization header
    - debian/patches/CVE-2018-18074.patch: fix in requests/sessions.py.
    - CVE-2018-18074

 -- Leonidas S. Barbosa <leo.barbosa@canonical.com>  Wed, 10 Oct 2018 13:24:54 -0300

requests (2.2.1-1ubuntu0.3) trusty-proposed; urgency=medium

  * SRU, update python3.4 for trusty. LP: #1433324.
  * Build a -whl package (setuptools is needed to build the wheel package).

 -- Matthias Klose <doko@ubuntu.com>  Tue, 17 Mar 2015 23:40:09 +0100

requests (2.2.1-1ubuntu0.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Session fixation and cookie stealing issue
    (LP: #1432555).
    - debian/patches/CVE-2015-2296.patch: extract cookies from the original
      request (which still has the host which returned the cookies)
    - CVE-2015-2296

 -- Daniel Watkins <daniel.watkins@canonical.com>  Mon, 16 Mar 2015 10:11:03 +0000

requests (2.2.1-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Authorization header disclosure on redirect
    - debian/patches/CVE-2014-1829.patch: if redirected, strip
      authentication header in requests/sessions.py, add
      should_bypass_proxies() to requests/utils.py.
    - CVE-2014-1829
  * SECURITY UPDATE: Proxy-Authorization header disclosure on redirect
    - debian/patches/CVE-2014-1830.patch: also strip proxy headers in
      requests/sessions.py, added test to test_requests.py.
    - CVE-2014-1830

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 30 Sep 2014 16:13:52 -0400

requests (2.2.1-1) unstable; urgency=medium

  * New upstream release
  * debian/control
    - Bumped Standards-Version to 3.9.5 (no changes needed)
  * debian/copyright
    - Updated copyright years
  * debian/patches/02_use-system-chardet-and-urllib3.patches
    - Refreshed

 -- Daniele Tricoli <eriol@mornie.org>  Mon, 27 Jan 2014 04:58:17 +0100

requests (2.0.0-1) unstable; urgency=low

  * New upstream release (Closes: #725784)
  * Switched to pybuild
  * debian/clean
    - Switched to debian/clean for cleaning instead of using debian/rules
  * debian/control
    - Bumped python(3)-urllib3 to (>=1.7.1)
  * debian/copyright
    - Updated copyright year
  * debian/patches/02_use-system-chardet-and-urllib3.patches
    - Refreshed
  * debian/watch
    - Switched download URL to https

 -- Daniele Tricoli <eriol@mornie.org>  Fri, 18 Oct 2013 19:20:21 +0200

requests (1.2.3-1) unstable; urgency=low

  * New upstream release (Closes: #712915) (LP: #1187429)
    - Thanks to Scott Moser for the report
  * debian/compat
    - Bumped debhelper compatibility level to 9
  * debian/control
    - Bumped debhelper B-D to (>= 9)
    - Temporarily bumped X-Python-Version to >= 2.7 to prevent FTBFS
      due to lack of python-urllib3 for Python 2.6
  * debian/patches/02_use-system-chardet-and-urllib3.patches
    - Refreshed

 -- Daniele Tricoli <eriol@mornie.org>  Fri, 21 Jun 2013 08:52:39 +0200

requests (1.2.0-2) unstable; urgency=low

  * Uploading to unstable.
  * rm -rf requests.egg-info on clean so the package can be built twice.

 -- Thomas Goirand <zigo@debian.org>  Sat, 11 May 2013 05:15:04 +0000

requests (1.2.0-1) experimental; urgency=low

  * New upstream version.
  * Refreshed both debian-specific patches.

 -- Thomas Goirand <zigo@debian.org>  Thu, 25 Apr 2013 22:56:42 +0000

requests (1.1.0-1) experimental; urgency=low

  * New upstream release (Closes: #692602)
    - Thanks to Barry Warsaw for report
  * debian/control
    - Added python-chardet, python3-chardet to Build-Depends and moved
      them from Recommends to Depends since chardet is now required
    - Added python(3)-urllib3 (>= 1.5) to Build-Depends and Depends
      since the embedded copy is no more a fork
    - Removed python(3)-six since python(3)-urllib3 is not embedded
      anymore
    - Removed python-gevent and python-oauthlib from Recommends
      since upstream is not using them anymore
    - Bumped Standards-Version to 3.9.4 (no changes needed)
    - Fixed lintian vcs-field-not-canonical
  * debian/copyright
    - Updated to reflect upstream switch to Apache 2.0 and updated
      copyright years
  * debian/patches/01_do-not-use-python-certifi.patch
    - Removed because no longer necessary
  * debian/patches/02_do-not-use-embedded-python-six.patch
    - Removed because no longer necessary
  * debian/patches/01_use-system-ca-certificates.patch
    - Use the bundle provided by ca-certificates instead of
      the embedded one
  * debian/patches/02_use-system-chardet-and-urllib3.patches
    - Use the system python-chardet and python-urllib3 instead of the
      embedded copies

 -- Daniele Tricoli <eriol@mornie.org>  Sun, 20 Jan 2013 23:03:45 +0100

requests (0.12.1-1) unstable; urgency=low

  * New upstream release
  * debian/control
    - Added python-oauthlib to python-requests' Recommends field
  * debian/patches/01_do-not-use-python-certifi.patch
    - Refreshed

 -- Daniele Tricoli <eriol@mornie.org>  Fri, 04 May 2012 14:34:47 +0200

requests (0.11.2-1) unstable; urgency=low

  * New upstream release
  * debian/patches/01_do-not-use-python-certifi.patch
    - Refreshed

 -- Daniele Tricoli <eriol@mornie.org>  Mon, 23 Apr 2012 16:06:33 +0200

requests (0.11.1-1) unstable; urgency=low

  * New upstream release
  * debian/control
    - Added python3-chardet to python3-requests' Recommends field
    - Updated Description field
  * debian/patches/02_do-not-use-embedded-python-six.patch
    - Refreshed

 -- Daniele Tricoli <eriol@mornie.org>  Sun, 01 Apr 2012 12:33:42 +0200

requests (0.10.8-1) unstable; urgency=low

  [ Piotr Ożarowski ]
  * Fix typo in python3-requests' ${python3:Depends}

  [ Daniele Tricoli ]
  * New upstream release (Closes: #663561)
  * Removed embedded copy of python-six
    - Added debian/patches/02_do-not-use-embedded-python-six.patch
    - Added override_dh_auto_configure to debian/rules to remove
      the embedded copy
    - Added python(3)-six to Builds-Depends and Depends
  * debian/control
    - Bumped Standards-Version to 3.9.3 (no changes needed)
  * debian/copyright
    - Added forgotten stanzas about packages inside the fork
      of python-urllib3
  * debian/patches/01_do-not-use-python-certifi.patch
    - Refreshed
  * debian/patches/02_fix-python3-except-sintax-error.patch
    - Removed as it is applied upstream

 -- Daniele Tricoli <eriol@mornie.org>  Mon, 19 Mar 2012 01:20:59 +0100

requests (0.10.1-1) unstable; urgency=low

  * New upstream release
    - Adds Python 3 support
  * Builded python 3 package
  * debian/control
    - Added python-chardet to Recommends
    - Bumped X-Python-Version >= 2.6
    - Added ca-certificates to Depends
    - Added python3-all to Build-Depends
  * debian/copyright
    - Updated Format URI
    - Updated copyright years
  * debian/patches/01_do-not-use-python-certifi.patch
    - To verify SSL certificates for HTTPS requests, use the bundle provided by
      ca-certificates instead of python-certifi
  * debian/patches/02_fix-python3-except-sintax-error.patches
    - Fix SyntaxError on Python3 because "except Error, e" is not supported
      anymore
  * debian/rules
    - Added override_dh_auto_clean to make the package build twice in a row

 -- Daniele Tricoli <eriol@mornie.org>  Sun, 05 Feb 2012 04:51:38 +0100

requests (0.8.2-1) unstable; urgency=low

  * New upstream release
  * debian/watch
    - Removed "debian uupdate" options
  * debian/{copyright,README.source}
    - Updated to reflect upstream changes: switched from poster to
      urllib3
    - Added a stanza about the embedded modified copy of the
      standard module Cookie

 -- Daniele Tricoli <eriol@mornie.org>  Fri, 25 Nov 2011 00:02:28 +0100

requests (0.6.4-1) unstable; urgency=low

  * New upstream release
  * debian/control
    - Dropped python-eventlet from Depends field because it's not used
      anymore
    - Moved python-gevent from Depends field to Recommends field so
      python-requests can be installed also in ia64 and sparc

 -- Daniele Tricoli <eriol@mornie.org>  Wed, 19 Oct 2011 20:49:39 +0200

requests (0.6.1-1) unstable; urgency=low

  * New upstream release

 -- Daniele Tricoli <eriol@mornie.org>  Tue, 23 Aug 2011 02:00:41 +0200

requests (0.5.0-1) unstable; urgency=low

  * New upstream release
  * debian/control
    - Updated description to mention proxy support

 -- Daniele Tricoli <eriol@mornie.org>  Sun, 26 Jun 2011 07:12:03 +0200

requests (0.4.1-1) unstable; urgency=low

  * Initial release (Closes: #629370)

 -- Daniele Tricoli <eriol@mornie.org>  Mon, 06 Jun 2011 02:11:15 +0200
