Compare commits

1 Commits
1.1 ... main

4 changed files with 34 additions and 11 deletions

BIN
h11-0.14.0.tar.gz (Stored with Git LFS)

Binary file not shown.

BIN
h11-0.16.0.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@@ -1,3 +1,25 @@
-------------------------------------------------------------------
Fri Apr 25 07:26:57 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
- Update 0.16.0:
* Security fix (CVE-2025-43859, bsc#1241872)
Reject certain malformed Transfer-Encoding: chunked bodies that
were previously accepted. These could have enabled
request-smuggling attacks when an h11-based HTTP server was placed
behind a load balancer with a matching bug in its chunked
handling.
Advisory with more details:
https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj
- 0.15.0:
* Reject Content-Lengths >= 1 zettabyte (1 billion terabytes) early,
without attempting to parse the integer (#181)
-------------------------------------------------------------------
Mon Jan 29 21:36:32 UTC 2024 - Dirk Müller <dmueller@suse.com>
- spec cleanup
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Apr 21 12:25:58 UTC 2023 - Dirk Müller <dmueller@suse.com> Fri Apr 21 12:25:58 UTC 2023 - Dirk Müller <dmueller@suse.com>

View File

@@ -1,7 +1,7 @@
# #
# spec file for package python-h11 # spec file for package python-h11
# #
# Copyright (c) 2023 SUSE LLC # Copyright (c) 2025 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@@ -16,17 +16,17 @@
# #
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define skip_python2 1
%{?sle15_python_module_pythons} %{?sle15_python_module_pythons}
Name: python-h11 Name: python-h11
Version: 0.14.0 Version: 0.16.0
Release: 0 Release: 0
Summary: A pure-Python, bring-your-own-I/O implementation of HTTP/11 Summary: A pure-Python, bring-your-own-I/O implementation of HTTP/11
License: MIT License: MIT
URL: https://github.com/python-hyper/h11 URL: https://github.com/python-hyper/h11
Source: https://files.pythonhosted.org/packages/source/h/h11/h11-%{version}.tar.gz Source: https://files.pythonhosted.org/packages/source/h/h11/h11-%{version}.tar.gz
BuildRequires: %{python_module pip}
BuildRequires: %{python_module setuptools} BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module wheel}
BuildRequires: fdupes BuildRequires: fdupes
BuildRequires: python-rpm-macros BuildRequires: python-rpm-macros
BuildArch: noarch BuildArch: noarch
@@ -43,10 +43,10 @@ heavily inspired by hyper-h2 <https://hyper-h2.readthedocs.io>
%setup -q -n h11-%{version} %setup -q -n h11-%{version}
%build %build
%python_build %pyproject_wheel
%install %install
%python_install %pyproject_install
%python_expand %fdupes %{buildroot}%{$python_sitelib} %python_expand %fdupes %{buildroot}%{$python_sitelib}
%check %check
@@ -55,6 +55,7 @@ heavily inspired by hyper-h2 <https://hyper-h2.readthedocs.io>
%files %{python_files} %files %{python_files}
%doc README.rst %doc README.rst
%license LICENSE.txt %license LICENSE.txt
%{python_sitelib}/* %{python_sitelib}/h11
%{python_sitelib}/h11-%{version}.dist-info
%changelog %changelog