CVE-2015-2296

Advisory

Coldsweat 0.10.0 updates its dependency 'requests' to version '2.20.1' to include a security fix.
https://github.com/passiomatic/coldsweat/commit/646edf0ef75cf62c7ba009a7ce62b4b8ffae26c3

Affected package

Affected versions

Fixed versions

Vulnerability changelog

🎉 A new version after almost 5 years!

This version is a nearly complete rewrite of the old Python 2 codebase, using Python 3 and the Flask web framework. I have to publicly express my gratitude to [Oz Tiram](https://github.com/oz123) for the original PR which started the Python 3 port years ago.

This version focuses on streamline the feed fetcher, fix security issues, and improve testing, while the next one will revamp the UI. Coldsweat now uses the trusty Flask web framework and latest version of the lovely Peewee ORM which supports Sqlite, MySQL, and PostgreSQL databases.

Coldsweat is now available as a Python wheel, so it can be installed from [PyPI](https://pypi.org/project/coldsweat/) like any other package via `pip` or similar utilities.

I hope you will enjoy this new release!

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2296