Changelog requests version 2.5.2

[pyup-vuln-bot]

Keywords: security

++++++++++++++++++

Features and Improvements

• Add sha256 fingerprint support. (shazow/urllib3540_)
• Improve the performance of headers. (shazow/urllib3544_)

Bugfixes

• Copy pip's import machinery. When downstream redistributors remove
  requests.packages.urllib3 the import machinery will continue to let those
  same symbols work. Example usage in requests' documentation and 3rd-party
  libraries relying on the vendored copies of urllib3 will work without having
  to fallback to the system urllib3.
• Attempt to quote parts of the URL on redirect if unquoting and then quoting
  fails. (2356)
• Fix filename type check for multipart form-data uploads. (2411)
• Properly handle the case where a server issuing digest authentication
  challenges provides both auth and auth-int qop-values. (2408)
• Fix a socket leak. (shazow/urllib3549_)
• Fix multiple Set-Cookie headers properly. (shazow/urllib3534_)
• Disable the built-in hostname verification. (shazow/urllib3526_)
• Fix the behaviour of decoding an exhausted stream. (shazow/urllib3535_)

Security

• Pulled in an updated cacert.pem.
• Drop RC4 from the default cipher list. (shazow/urllib3551_)

.. _shazow/urllib3551: urllib3/urllib3#551
.. _shazow/urllib3549: urllib3/urllib3#549
.. _shazow/urllib3544: urllib3/urllib3#544
.. _shazow/urllib3540: urllib3/urllib3#540
.. _shazow/urllib3535: urllib3/urllib3#535
.. _shazow/urllib3534: urllib3/urllib3#534
.. _shazow/urllib3526: urllib3/urllib3#526