diff --git a/httpie-1.0.2.tar.gz b/httpie-1.0.2.tar.gz deleted file mode 100644 index b40959b..0000000 --- a/httpie-1.0.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f11f5ecdbcc0571aa865fb29cd5db68ba6bce4f15a5aae3f27a32d19b0854dc9 -size 765210 diff --git a/httpie-1.0.3.tar.gz b/httpie-1.0.3.tar.gz new file mode 100644 index 0000000..c2d342a --- /dev/null +++ b/httpie-1.0.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ecfb1ecdfd1468100bd9ffecebe1bea6d7d72c72149ea91f3d0112dc8ef03c7a +size 1745537 diff --git a/httpie.changes b/httpie.changes index 1425937..99621f8 100644 --- a/httpie.changes +++ b/httpie.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Tue Aug 27 14:23:44 UTC 2019 - Martin Hauke + +- Update to version 1.0.3 + * Fix CVE-2019-10751 (HTTPie is volnerable to Open Redirect that + allows an attacker to write an arbitrary file with supplied + filename and content to the current directory, by redirecting + a request from HTTP to a crafted URL pointing to a server in + his or hers control. + ------------------------------------------------------------------- Sun Dec 16 14:19:43 UTC 2018 - mardnh@gmx.de diff --git a/httpie.spec b/httpie.spec index 390aa1d..5bef6ef 100644 --- a/httpie.spec +++ b/httpie.spec @@ -1,7 +1,7 @@ # # spec file for package httpie # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,13 +12,14 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# %define skip_python2 1 %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: httpie -Version: 1.0.2 +Version: 1.0.3 Release: 0 Summary: CLI, cURL-like tool for humans License: BSD-3-Clause