CVE-2019-11324

Advisory

Kytos 2019.1b3 updates 'urllib3' to '1.24.2' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

**************************************

Added
=====
- Added REST API endpoints to manage NApps from remote applications
- New kytos/kronos NApp was released. This NApp will be responsible for
handling time series data, with initial support for InfluxDB (EXPERIMENTAL).
For now on, visit kytos/kronos changelog for updates.

Changed
=======
- kytos-utils is now decoupled from kytos core
- Changed default Openflow TCP port to 6653

Removed
=======
- Removed diraol's watchdog fork dependency

Fixed
=====
- Fixed kytos install from PyPI. Now dependencies are properly installed
- Fixed some grammar errors in documentation
- Fixed some linter issues

Security
========
- Changed some dependencies versions in order to fix security bugs

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11324