|
|
|
@ -1,79 +1,103 @@
|
|
|
|
|
%global srcname urllib3
|
|
|
|
|
|
|
|
|
|
# Tests are disabled to remove the test dependencies
|
|
|
|
|
# Specify --with tests to run the tests on e.g. EPEL
|
|
|
|
|
# When bootstrapping Python, we cannot test this yet
|
|
|
|
|
# RHEL does not include the test dependencies and the dependencies for extras
|
|
|
|
|
%if 0%{?rhel}
|
|
|
|
|
%bcond_with tests
|
|
|
|
|
%bcond_with extras
|
|
|
|
|
%else
|
|
|
|
|
%bcond_without tests
|
|
|
|
|
%bcond_without extras
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
Name: python-%{srcname}
|
|
|
|
|
Version: 1.26.5
|
|
|
|
|
Release: 5%{?dist}.1
|
|
|
|
|
Summary: Python HTTP library with thread-safe connection pooling and file post
|
|
|
|
|
Name: python-urllib3
|
|
|
|
|
Version: 1.26.19
|
|
|
|
|
Release: 1%{?dist}
|
|
|
|
|
Summary: HTTP library with thread-safe connection pooling, file post, and more
|
|
|
|
|
|
|
|
|
|
# SPDX
|
|
|
|
|
License: MIT
|
|
|
|
|
URL: https://github.com/urllib3/urllib3
|
|
|
|
|
Source0: %{url}/archive/%{version}/%{srcname}-%{version}.tar.gz
|
|
|
|
|
# Unbundle ssl_match_hostname since we depend on it
|
|
|
|
|
Source1: ssl_match_hostname_py3.py
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
Source: %{url}/archive/%{version}/urllib3-%{version}.tar.gz
|
|
|
|
|
|
|
|
|
|
# CVE-2023-43804
|
|
|
|
|
# Added the `Cookie` header to the list of headers to strip from
|
|
|
|
|
# requests when redirecting to a different host. As before, different headers
|
|
|
|
|
# can be set via `Retry.remove_headers_on_redirect`.
|
|
|
|
|
# Tests backported only partially as we don't use the whole part of
|
|
|
|
|
# testing with dummyserver.
|
|
|
|
|
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=2242493
|
|
|
|
|
# Upstream fix: https://github.com/urllib3/urllib3/commit/01220354d389cd05474713f8c982d05c9b17aafb
|
|
|
|
|
Patch1: CVE-2023-43804.patch
|
|
|
|
|
|
|
|
|
|
# CVE-2023-45803
|
|
|
|
|
# Remove HTTP request body when request method is changed.
|
|
|
|
|
# Tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2023-45803
|
|
|
|
|
# Upstream fix: https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9
|
|
|
|
|
Patch2: CVE-2023-45803.patch
|
|
|
|
|
|
|
|
|
|
# PoolManager.urlopen fails with TypeError for http connection if the PoolManager is instantiated with server_hostname
|
|
|
|
|
# Tracking bug: https://issues.redhat.com/browse/RHEL-39285
|
|
|
|
|
# Upstream fix: https://github.com/urllib3/urllib3/commit/f1d40fd07f7b5d9cf846a18fb5a920b4be07dfc5
|
|
|
|
|
Patch3: Add-server_hostname-to-SSL_KEYWORDS.patch
|
|
|
|
|
|
|
|
|
|
# CVE-2024-37891
|
|
|
|
|
# Proxy-authorization request header is not stripped during cross-origin redirects.
|
|
|
|
|
# Tracking bug: https://issues.redhat.com/browse/RHEL-43172
|
|
|
|
|
# Upstream fix: https://github.com/urllib3/urllib3/commit/40b6d1605814dd1db0a46e202d6e56f2e4c9a468
|
|
|
|
|
Patch4: CVE-2024-37891.patch
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
Python HTTP module with connection pooling and file POST abilities.
|
|
|
|
|
|
|
|
|
|
%package -n python3-%{srcname}
|
|
|
|
|
Summary: Python3 HTTP library with thread-safe connection pooling and file post
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
|
|
|
|
|
BuildRequires: python3-devel
|
|
|
|
|
BuildRequires: python3-setuptools
|
|
|
|
|
|
|
|
|
|
%if %{with tests}
|
|
|
|
|
BuildRequires: python3-dateutil
|
|
|
|
|
BuildRequires: python3-six
|
|
|
|
|
BuildRequires: python3-pysocks
|
|
|
|
|
BuildRequires: python3-pytest
|
|
|
|
|
BuildRequires: python3-pytest-freezegun
|
|
|
|
|
BuildRequires: python3-pytest-timeout
|
|
|
|
|
BuildRequires: python3-tornado
|
|
|
|
|
BuildRequires: python3-trustme
|
|
|
|
|
BuildRequires: python3-idna
|
|
|
|
|
# Test dependencies are listed only in dev-requirements.txt. Because there are
|
|
|
|
|
# linters and coverage tools mixed in, and exact versions are pinned, we resort
|
|
|
|
|
# to manual listing.
|
|
|
|
|
# mock==3.0.5: patched out in %%prep
|
|
|
|
|
# coverage~=6.0;python_version>="3.6": omitted linter/coverage tool
|
|
|
|
|
# tornado==6.1.0;python_version>="3.6"
|
|
|
|
|
BuildRequires: %{py3_dist tornado} >= 6.1
|
|
|
|
|
# PySocks==1.7.1
|
|
|
|
|
BuildRequires: %{py3_dist PySocks} >= 1.7.1
|
|
|
|
|
# win-inet-pton==1.1.0: Windows-only workaround
|
|
|
|
|
# pytest==6.2.4; python_version>="3.10"
|
|
|
|
|
BuildRequires: %{py3_dist pytest} >= 6.2.4
|
|
|
|
|
# pytest-timeout==1.4.2
|
|
|
|
|
BuildRequires: %{py3_dist pytest-timeout} >= 1.4.2
|
|
|
|
|
# pytest-freezegun==0.4.2
|
|
|
|
|
BuildRequires: %{py3_dist pytest-freezegun} >= 0.4.2
|
|
|
|
|
# flaky==3.7.0: not really required
|
|
|
|
|
# trustme==0.7.0
|
|
|
|
|
BuildRequires: %{py3_dist trustme} >= 0.7
|
|
|
|
|
# cryptography==38.0.3;python_version>="3.6": associated with the deprecated
|
|
|
|
|
# “secure” extra
|
|
|
|
|
# python-dateutil==2.8.1
|
|
|
|
|
BuildRequires: %{py3_dist python-dateutil} >= 2.8.1
|
|
|
|
|
# gcp-devrel-py-tools==0.0.16: not used in offline testing
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%global _description %{expand:
|
|
|
|
|
urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings
|
|
|
|
|
many critical features that are missing from the Python standard libraries:
|
|
|
|
|
|
|
|
|
|
• Thread safety.
|
|
|
|
|
• Connection pooling.
|
|
|
|
|
• Client-side SSL/TLS verification.
|
|
|
|
|
• File uploads with multipart encoding.
|
|
|
|
|
• Helpers for retrying requests and dealing with HTTP redirects.
|
|
|
|
|
• Support for gzip, deflate, brotli, and zstd encoding.
|
|
|
|
|
• Proxy support for HTTP and SOCKS.
|
|
|
|
|
• 100% test coverage.}
|
|
|
|
|
|
|
|
|
|
%description %{_description}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%package -n python3-urllib3
|
|
|
|
|
Summary: %{summary}
|
|
|
|
|
|
|
|
|
|
BuildRequires: ca-certificates
|
|
|
|
|
Requires: ca-certificates
|
|
|
|
|
Requires: python3-idna
|
|
|
|
|
Requires: python3-six
|
|
|
|
|
Requires: python3-pysocks
|
|
|
|
|
|
|
|
|
|
%description -n python3-%{srcname}
|
|
|
|
|
Python3 HTTP module with connection pooling and file POST abilities.
|
|
|
|
|
# There has historically been a manual hard dependency on python3-idna.
|
|
|
|
|
BuildRequires: %{py3_dist idna}
|
|
|
|
|
Requires: %{py3_dist idna}
|
|
|
|
|
|
|
|
|
|
# grep __version__ src/urllib3/packages/six.py
|
|
|
|
|
Provides: bundled(python3dist(six)) = 1.16.0
|
|
|
|
|
|
|
|
|
|
%if %{with extras}
|
|
|
|
|
# There has historically been a manual hard dependency on python3-pysocks;
|
|
|
|
|
# since bringing it in is the sole function of python3-urllib3+socks,
|
|
|
|
|
# we recommend it, so it is installed by default.
|
|
|
|
|
Recommends: python3-urllib3+socks
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
%description -n python3-urllib3 %{_description}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%if %{with extras}
|
|
|
|
|
# We do NOT package the “secure” extra because it is deprecated; see:
|
|
|
|
|
# “Deprecate the pyOpenSSL TLS implementation and [secure] extra”
|
|
|
|
|
# https://github.com/urllib3/urllib3/issues/2680
|
|
|
|
|
%pyproject_extras_subpkg -n python3-urllib3 brotli socks
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%autosetup -p1 -n %{srcname}-%{version}
|
|
|
|
|
%autosetup -n urllib3-%{version}
|
|
|
|
|
# Make sure that the RECENT_DATE value doesn't get too far behind what the current date is.
|
|
|
|
|
# RECENT_DATE must not be older that 2 years from the build time, or else test_recent_date
|
|
|
|
|
# (from test/test_connection.py) would fail. However, it shouldn't be to close to the build time either,
|
|
|
|
@ -92,96 +116,168 @@ Python3 HTTP module with connection pooling and file POST abilities.
|
|
|
|
|
recent_date=$(date --date "7 month ago" +"%Y, %_m, %_d")
|
|
|
|
|
sed -i "s/^RECENT_DATE = datetime.date(.*)/RECENT_DATE = datetime.date($recent_date)/" src/urllib3/connection.py
|
|
|
|
|
|
|
|
|
|
# Drop the dummyserver tests in koji. They fail there in real builds, but not
|
|
|
|
|
# in scratch builds (weird).
|
|
|
|
|
rm -rf test/with_dummyserver/
|
|
|
|
|
# Don't run the Google App Engine tests
|
|
|
|
|
rm -rf test/appengine/
|
|
|
|
|
# Lots of these tests started failing, even for old versions, so it has something
|
|
|
|
|
# to do with Fedora in particular. They don't fail in upstream build infrastructure
|
|
|
|
|
rm -rf test/contrib/
|
|
|
|
|
|
|
|
|
|
# Tests for Python built without SSL, but Fedora builds with SSL. These tests
|
|
|
|
|
# fail when combined with the unbundling of backports-ssl_match_hostname
|
|
|
|
|
rm -f test/test_no_ssl.py
|
|
|
|
|
|
|
|
|
|
# Use the standard library instead of a backport
|
|
|
|
|
sed -i -e 's/^import mock/from unittest import mock/' \
|
|
|
|
|
-e 's/^from mock import /from unittest.mock import /' \
|
|
|
|
|
test/*.py docs/conf.py
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%generate_buildrequires
|
|
|
|
|
# Generate BR’s from packaged extras even when tests are disabled, to ensure
|
|
|
|
|
# the extras metapackages are installable if the build succeeds.
|
|
|
|
|
%pyproject_buildrequires %{?with_extras:-x brotli,socks}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%build
|
|
|
|
|
%py3_build
|
|
|
|
|
%pyproject_wheel
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
%py3_install
|
|
|
|
|
|
|
|
|
|
# Unbundle the Python 3 build
|
|
|
|
|
rm -rf %{buildroot}/%{python3_sitelib}/urllib3/packages/six.py
|
|
|
|
|
rm -rf %{buildroot}/%{python3_sitelib}/urllib3/packages/__pycache__/six.*
|
|
|
|
|
rm -rf %{buildroot}/%{python3_sitelib}/urllib3/packages/ssl_match_hostname/
|
|
|
|
|
%pyproject_install
|
|
|
|
|
|
|
|
|
|
mkdir -p %{buildroot}/%{python3_sitelib}/urllib3/packages/
|
|
|
|
|
cp -a %{SOURCE1} %{buildroot}/%{python3_sitelib}/urllib3/packages/ssl_match_hostname.py
|
|
|
|
|
ln -s %{python3_sitelib}/six.py %{buildroot}/%{python3_sitelib}/urllib3/packages/six.py
|
|
|
|
|
ln -s %{python3_sitelib}/__pycache__/six.cpython-%{python3_version_nodots}.opt-1.pyc \
|
|
|
|
|
%{buildroot}/%{python3_sitelib}/urllib3/packages/__pycache__/
|
|
|
|
|
ln -s %{python3_sitelib}/__pycache__/six.cpython-%{python3_version_nodots}.pyc \
|
|
|
|
|
%{buildroot}/%{python3_sitelib}/urllib3/packages/__pycache__/
|
|
|
|
|
%pyproject_save_files urllib3
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%if %{with tests}
|
|
|
|
|
%check
|
|
|
|
|
%pytest -v
|
|
|
|
|
# urllib3.contrib.socks requires urllib3[socks]
|
|
|
|
|
# urllib3.contrib.ntlmpool is deprecated and requires ntlm
|
|
|
|
|
# urllib3.contrib.securetransport is macOS only
|
|
|
|
|
# urllib3.contrib.pyopenssl requires urllib3[secure]
|
|
|
|
|
%{pyproject_check_import %{!?with_extras:-e urllib3.contrib.socks}
|
|
|
|
|
-e urllib3.contrib.ntlmpool
|
|
|
|
|
-e urllib3.contrib.securetransport
|
|
|
|
|
-e urllib3.contrib.pyopenssl}
|
|
|
|
|
%if %{with tests}
|
|
|
|
|
# Drop the dummyserver tests in koji. They fail there in real builds, but not
|
|
|
|
|
# in scratch builds (weird).
|
|
|
|
|
ignore="${ignore-} --ignore=test/with_dummyserver/"
|
|
|
|
|
# Don't run the Google App Engine tests
|
|
|
|
|
ignore="${ignore-} --ignore=test/appengine/"
|
|
|
|
|
# Lots of these tests started failing, even for old versions, so it has something
|
|
|
|
|
# to do with Fedora in particular. They don't fail in upstream build infrastructure
|
|
|
|
|
ignore="${ignore-} --ignore=test/contrib/"
|
|
|
|
|
# Tests for Python built without SSL, but Fedora builds with SSL. These tests
|
|
|
|
|
# fail when combined with the unbundling of backports-ssl_match_hostname
|
|
|
|
|
ignore="${ignore-} --ignore=test/test_no_ssl.py"
|
|
|
|
|
%pytest -v ${ignore-}
|
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%files -n python3-%{srcname}
|
|
|
|
|
%license LICENSE.txt
|
|
|
|
|
%doc CHANGES.rst README.rst CONTRIBUTORS.txt
|
|
|
|
|
%{python3_sitelib}/urllib3/
|
|
|
|
|
%{python3_sitelib}/urllib3-*.egg-info/
|
|
|
|
|
%files -n python3-urllib3 -f %{pyproject_files}
|
|
|
|
|
%doc CHANGES.rst README.rst
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Tue Jun 18 2024 Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-5.1
|
|
|
|
|
- Security fix for CVE-2024-37891
|
|
|
|
|
- Backport upstream patch to fix TypeError for http connection if the PoolManager
|
|
|
|
|
- is instantiated with server_hostname
|
|
|
|
|
Resolves: RHEL-49853
|
|
|
|
|
* Tue Nov 26 2024 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 1.26.19-1
|
|
|
|
|
- Rebuilt for MSVSphere 10
|
|
|
|
|
|
|
|
|
|
* Wed Jun 26 2024 Lumír Balhar <lbalhar@redhat.com> - 1.26.19-1
|
|
|
|
|
- Update to 1.26.19 to fix CVE-2024-37891
|
|
|
|
|
Resolves: RHEL-43171
|
|
|
|
|
|
|
|
|
|
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1.26.18-4
|
|
|
|
|
- Bump release for June 2024 mass rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Jan 26 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.18-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.18-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Oct 17 2023 Maxwell G <maxwell@gtmx.me> - 1.26.18-1
|
|
|
|
|
- Update to 1.26.18.
|
|
|
|
|
- Mitigates CVE-2023-45803 / GHSA-g4mx-q9vg-27p4.
|
|
|
|
|
|
|
|
|
|
* Mon Oct 09 2023 Miro Hrončok <mhroncok@redhat.com> - 1.26.17-2
|
|
|
|
|
- Switch the hardcoded dependency on urllib3[socks] to a weak one
|
|
|
|
|
|
|
|
|
|
* Mon Oct 02 2023 Benjamin A. Beasley <code@musicinmybrain.net> - 1.26.17-1
|
|
|
|
|
- Update to 1.26.17: fix CVE-2023-43804 (GHSA-v845-jxx5-vc9f)
|
|
|
|
|
|
|
|
|
|
* Wed Aug 30 2023 Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.16-3
|
|
|
|
|
- Use bundled six
|
|
|
|
|
|
|
|
|
|
* Fri Jul 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.16-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Sat Jul 01 2023 Benjamin A. Beasley <code@musicinmybrain.net> - 1.26.16-1
|
|
|
|
|
- Update to 1.26.16
|
|
|
|
|
|
|
|
|
|
* Sat Jul 01 2023 Python Maint <python-maint@redhat.com> - 1.26.15-3
|
|
|
|
|
- Rebuilt for Python 3.12
|
|
|
|
|
|
|
|
|
|
* Tue Jun 13 2023 Python Maint <python-maint@redhat.com> - 1.26.15-2
|
|
|
|
|
- Bootstrap for Python 3.12
|
|
|
|
|
|
|
|
|
|
* Tue Dec 12 2023 Lumír Balhar <lbalhar@redhat.com> - 1.26.5-5
|
|
|
|
|
- Security fix for CVE-2023-45803
|
|
|
|
|
Resolves: RHEL-16874
|
|
|
|
|
* Thu May 18 2023 Benjamin A. Beasley <code@musicinmybrain.net> - 1.26.15-1
|
|
|
|
|
- Update to 1.26.15
|
|
|
|
|
|
|
|
|
|
* Thu Oct 12 2023 Lumír Balhar <lbalhar@redhat.com> - 1.26.5-4
|
|
|
|
|
- Security fix for CVE-2023-43804
|
|
|
|
|
Resolves: RHEL-12001
|
|
|
|
|
* Thu May 18 2023 Benjamin A. Beasley <code@musicinmybrain.net> - 1.26.12-5
|
|
|
|
|
- Confirm the License is SPDX MIT
|
|
|
|
|
- Update Summary and description based on upstream
|
|
|
|
|
- Add metapackages for brotli and socks extras
|
|
|
|
|
- Port to pyproject-rpm-macros
|
|
|
|
|
|
|
|
|
|
* Tue Feb 08 2022 Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-3
|
|
|
|
|
- Add automatically generated Obsoletes tag with the python39- prefix
|
|
|
|
|
for smoother upgrade from RHEL8
|
|
|
|
|
- Related: rhbz#1990421
|
|
|
|
|
* Tue May 16 2023 Yaakov Selkowitz <yselkowi@redhat.com> - 1.26.12-4
|
|
|
|
|
- Disable tests by default in RHEL builds
|
|
|
|
|
|
|
|
|
|
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1.26.5-2
|
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
* Tue May 16 2023 Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.12-3
|
|
|
|
|
- Accomodate the test to the changed behavior of SSLContext.shared_ciphers() in CPython
|
|
|
|
|
- Fixes: rhbz#2203773
|
|
|
|
|
|
|
|
|
|
* Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.12-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Sep 15 2022 Kevin Fenzi <kevin@scrye.com> - 1.26.12-1
|
|
|
|
|
- Update to 1.26.12. Fixes rhbz#2104964
|
|
|
|
|
|
|
|
|
|
* Fri Jul 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.9-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Jun 14 2022 Python Maint <python-maint@redhat.com> - 1.26.9-3
|
|
|
|
|
- Rebuilt for Python 3.11
|
|
|
|
|
|
|
|
|
|
* Mon Jun 13 2022 Python Maint <python-maint@redhat.com> - 1.26.9-2
|
|
|
|
|
- Bootstrap for Python 3.11
|
|
|
|
|
|
|
|
|
|
* Mon May 30 2022 Kevin Fenzi <kevin@scrye.com> - 1.26.9-1
|
|
|
|
|
- Update to 1.26.9. fixes rhbz#2064777
|
|
|
|
|
|
|
|
|
|
* Fri Jan 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.8-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Sat Jan 08 2022 Kevin Fenzi <kevin@scrye.com> - 1.26.8-1
|
|
|
|
|
- Update to 1.26.8. Fixes rhbz#2038246
|
|
|
|
|
|
|
|
|
|
* Tue Jan 04 2022 Adam Williamson <awilliam@redhat.com> - 1.26.7-2
|
|
|
|
|
- Stop unbundling ssl.match_hostname, it's deprecated upstream (#2009550)
|
|
|
|
|
|
|
|
|
|
* Sun Sep 26 2021 Kevin Fenzi <kevin@scrye.com> - 1.26.7-1
|
|
|
|
|
- Update to 1.26.7. Fixes rhbz#2006973
|
|
|
|
|
|
|
|
|
|
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.26.6-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Sun Jul 11 2021 Kevin Fenzi <kevin@scrye.com> - 1.26.6-1
|
|
|
|
|
- Update to 1.26.1. Fixes rhbz#1976190
|
|
|
|
|
- Fix FTBFS. Fixes rhbz#1966120
|
|
|
|
|
|
|
|
|
|
* Wed Jun 30 2021 Yatin Karel <ykarel@redhat.com> - 1.26.5-2
|
|
|
|
|
- Update minimal requirement of six to >= 1.16.0
|
|
|
|
|
|
|
|
|
|
* Wed Jun 16 2021 Karolina Surma <ksurma@redhat.com> - 1.26.5-1
|
|
|
|
|
- Update to 1.26.5
|
|
|
|
|
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
|
|
|
|
|
Resolves: rhbz#1972639
|
|
|
|
|
- Fixes rhbz#1965056
|
|
|
|
|
|
|
|
|
|
* Tue May 18 2021 Miro Hrončok <mhroncok@redhat.com> - 1.26.4-1
|
|
|
|
|
- Update to 1.26.4
|
|
|
|
|
Resolves: rhbz#1935737
|
|
|
|
|
* Fri Jun 04 2021 Python Maint <python-maint@redhat.com> - 1.26.4-3
|
|
|
|
|
- Rebuilt for Python 3.10
|
|
|
|
|
|
|
|
|
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.25.10-6
|
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
|
* Wed Jun 02 2021 Python Maint <python-maint@redhat.com> - 1.26.4-2
|
|
|
|
|
- Bootstrap for Python 3.10
|
|
|
|
|
|
|
|
|
|
* Mon Mar 08 2021 Charalampos Stratakis <cstratak@redhat.com> - 1.25.10-5
|
|
|
|
|
- Disable tests on RHEL9 to remove the python-tornado dependency
|
|
|
|
|
* Tue May 18 2021 Miro Hrončok <mhroncok@redhat.com> - 1.26.4-1
|
|
|
|
|
- Update to 1.26.4
|
|
|
|
|
- Fixes rhbz#1889391
|
|
|
|
|
|
|
|
|
|
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.25.10-4
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
|