CVE-2018-18074

Advisory

Kytos-utils 2019.1b3 updates its dependency 'requests' to '>=2.20.0' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

**************************************
Added
=====
- kytos-utils now can be installed on a remote machine
- New unit tests in order to cover Napps.Manager
- Coverage configuration file

Changed
=======
- When packaging a NApp, kytos-utils will ignore files listed on .gitignore,
creating smaller NApps
- Improved Scrutinizer configuration
- Better error message when connecting to kytosd

Removed
=======
- Removed kytos-core dependency in order to allow standalone installation

Fixed
=====
- Few Linter issues

Security
========
- Updated requirements versions in order to fix some security bugs

Resources

• https://pypi.org/project/kytos-utils
• https://pyup.io/changelogs/kytos-utils/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074