python-requests: CVE-2014-1829, CVE-2014-1830: password disclosure on redirect

[Jakub Wilk <jwilk () debian org>]

FYI: a while ago python-requests 2.3.0 was released, with the following 
bugfix:

* No longer expose Authorization or Proxy-Authorization headers on 
redirect. Fix CVE-2014-1829 and CVE-2014-1830 respectively.


References:
https://bugs.debian.org/733108
https://github.com/kennethreitz/requests/issues/1885
https://bugzilla.redhat.com/show_bug.cgi?id=1046626

--
Jakub Wilk