Accepting request 726511 from home:mnhauke

- Update to version 1.0.3
  * Fix CVE-2019-10751 (HTTPie is volnerable to Open Redirect that
    allows an attacker to write an arbitrary file with supplied
    filename and content to the current directory, by redirecting
    a request from HTTP to a crafted URL pointing to a server in
    his or hers control.

OBS-URL: https://build.opensuse.org/request/show/726511
OBS-URL: https://build.opensuse.org/package/show/network:utilities/httpie?expand=0&rev=5
This commit is contained in:
Martin Hauke 2019-08-31 13:44:43 +00:00 committed by Git OBS Bridge
parent 6fefa5ee01
commit 8ff44f9419
4 changed files with 17 additions and 6 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f11f5ecdbcc0571aa865fb29cd5db68ba6bce4f15a5aae3f27a32d19b0854dc9
size 765210

3
httpie-1.0.3.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ecfb1ecdfd1468100bd9ffecebe1bea6d7d72c72149ea91f3d0112dc8ef03c7a
size 1745537

View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Tue Aug 27 14:23:44 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0.3
* Fix CVE-2019-10751 (HTTPie is volnerable to Open Redirect that
allows an attacker to write an arbitrary file with supplied
filename and content to the current directory, by redirecting
a request from HTTP to a crafted URL pointing to a server in
his or hers control.
-------------------------------------------------------------------
Sun Dec 16 14:19:43 UTC 2018 - mardnh@gmx.de

View File

@ -1,7 +1,7 @@
#
# spec file for package httpie
#
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -12,13 +12,14 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define skip_python2 1
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
Name: httpie
Version: 1.0.2
Version: 1.0.3
Release: 0
Summary: CLI, cURL-like tool for humans
License: BSD-3-Clause