diff --git a/httplib2-0.17.3.tar.gz b/httplib2-0.17.3.tar.gz deleted file mode 100644 index 1aebcae..0000000 --- a/httplib2-0.17.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:39dd15a333f67bfb70798faa9de8a6e99c819da6ad82b77f9a259a5c7b1225a2 -size 220685 diff --git a/httplib2-0.18.1.tar.gz b/httplib2-0.18.1.tar.gz new file mode 100644 index 0000000..2453356 --- /dev/null +++ b/httplib2-0.18.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8af66c1c52c7ffe1aa5dc4bcd7c769885254b0756e6e69f953c7f0ab49a70ba3 +size 262930 diff --git a/python-httplib2.changes b/python-httplib2.changes index df29825..40a7976 100644 --- a/python-httplib2.changes +++ b/python-httplib2.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Tue Oct 13 07:26:46 UTC 2020 - Dirk Mueller + +- update to 0.18.1: + * explicit build-backend workaround for pip build isolation bug + * IMPORTANT security vulnerability CWE-93 CRLF injection + Force %xx quote of space, CR, LF characters in uri. + * Ship test suite in source dist + ------------------------------------------------------------------- Wed Apr 29 10:54:19 UTC 2020 - Dirk Mueller diff --git a/python-httplib2.spec b/python-httplib2.spec index 406de64..a7440e8 100644 --- a/python-httplib2.spec +++ b/python-httplib2.spec @@ -20,7 +20,7 @@ # Tests require network connection %bcond_with tests Name: python-httplib2 -Version: 0.17.3 +Version: 0.18.1 Release: 0 Summary: A Python HTTP client library License: MIT AND Apache-2.0 AND (MPL-1.1 OR GPL-2.0-or-later OR LGPL-2.1-or-later)