Compare commits
1 Commits
Author | SHA256 | Date | |
---|---|---|---|
a8f7030ddd |
@@ -1,38 +1,3 @@
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 30 06:49:46 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
|
||||
|
||||
- Update to 3.0.1 (bsc#1232554, bsc#1232556, CVE-2024-49769, CVE-2024-49768):
|
||||
* Fix a bug that would lead to Waitress busy looping on select()
|
||||
on a half-open socket due to a race condition that existed when
|
||||
creating a new HTTPChannel. See
|
||||
https://github.com/Pylons/waitress/pull/435,
|
||||
https://github.com/Pylons/waitress/issues/418 and
|
||||
https://github.com/Pylons/waitress/security/advisories/GHSA-3f84-rpwh-47g6
|
||||
* No longer strip the header values before passing them to the
|
||||
WSGI environ. See https://github.com/Pylons/waitress/pull/434
|
||||
and https://github.com/Pylons/waitress/issues/432
|
||||
* Fix a race condition in Waitress when
|
||||
`channel_request_lookahead` is enabled that could lead to HTTP
|
||||
request smuggling.
|
||||
* See https://github.com/Pylons/waitress/security/advisories/GHSA-9298-4cf8-g4wj
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Jun 30 07:59:06 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 3.0.0:
|
||||
* Fixed testing of vendored asyncore code to not rely on
|
||||
particular naming for errno's.
|
||||
* HTTP Request methods and versions are now validated to meet
|
||||
the HTTP standards thereby dropping invalid requests on the floor.
|
||||
* No longer close the connection when sending a HEAD request
|
||||
response.
|
||||
* Always attempt to send the Connection: close response header
|
||||
when we are going to close the connection to let the remote
|
||||
know in more instances.
|
||||
* Document that trusted_proxy may be set to a wildcard value to
|
||||
trust all proxies.
|
||||
* clear_untrusted_proxy_headers is set to True by default.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Dec 4 15:20:28 UTC 2023 - Ana Guerrero <ana.guerrero@suse.com>
|
||||
|
||||
|
@@ -1,7 +1,7 @@
|
||||
#
|
||||
# spec file for package python-waitress
|
||||
# spec file
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
# Copyright (c) 2023 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
@@ -31,7 +31,7 @@
|
||||
%endif
|
||||
%{?sle15_python_module_pythons}
|
||||
Name: python-waitress%{psuffix}
|
||||
Version: 3.0.1
|
||||
Version: 2.1.2
|
||||
Release: 0
|
||||
Summary: Waitress WSGI server
|
||||
License: ZPL-2.1
|
||||
@@ -42,9 +42,7 @@ Source: https://files.pythonhosted.org/packages/source/w/waitress/waitre
|
||||
# https://docs.python.org/3/objects.inv -> python3.inv
|
||||
Source1: python3.inv
|
||||
Source2: fetch-intersphinx-inventories.sh
|
||||
BuildRequires: %{python_module pip}
|
||||
BuildRequires: %{python_module setuptools}
|
||||
BuildRequires: %{python_module wheel}
|
||||
BuildRequires: fdupes
|
||||
BuildRequires: python-rpm-macros >= 20210929
|
||||
BuildArch: noarch
|
||||
@@ -55,7 +53,7 @@ BuildRequires: alts
|
||||
Requires: alts
|
||||
%else
|
||||
Requires(post): update-alternatives
|
||||
Requires(postun): update-alternatives
|
||||
Requires(postun):update-alternatives
|
||||
%endif
|
||||
%else
|
||||
# Documentation requirements
|
||||
@@ -89,10 +87,10 @@ http://docs.pylonsproject.org/projects/waitress/en/latest/ .
|
||||
sed -i '/addopts/d' setup.cfg
|
||||
|
||||
%build
|
||||
%pyproject_wheel
|
||||
%python_build
|
||||
|
||||
%install
|
||||
%pyproject_install
|
||||
%python_install
|
||||
%python_clone -a %{buildroot}%{_bindir}/waitress-serve
|
||||
%python_expand %fdupes %{buildroot}%{$python_sitelib}
|
||||
|
||||
@@ -115,7 +113,7 @@ sed -i '/addopts/d' setup.cfg
|
||||
%doc COPYRIGHT.txt README.rst
|
||||
%python_alternative %{_bindir}/waitress-serve
|
||||
%{python_sitelib}/waitress
|
||||
%{python_sitelib}/waitress-%{version}.dist-info
|
||||
%{python_sitelib}/waitress-%{version}*-info
|
||||
|
||||
%else
|
||||
|
||||
|
BIN
waitress-2.1.2.tar.gz
(Stored with Git LFS)
Normal file
BIN
waitress-2.1.2.tar.gz
(Stored with Git LFS)
Normal file
Binary file not shown.
BIN
waitress-3.0.1.tar.gz
(Stored with Git LFS)
BIN
waitress-3.0.1.tar.gz
(Stored with Git LFS)
Binary file not shown.
Reference in New Issue
Block a user