From 3fd53f8a612735bc53fe945890b80f2084823506e7b0709bfde1daf6489fc59e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Thu, 6 Feb 2020 18:27:24 +0000 Subject: [PATCH] Accepting request 770668 from home:mcalabkova:branches:devel:languages:python - update to 1.4.3 * Waitress did not properly validate that the HTTP headers it received were properly formed, thereby potentially allowing a front-end server to treat a request different from Waitress. This could lead to HTTP request smuggling/splitting. - drop patch local-intersphinx-inventories.patch * it was commented out, anyway OBS-URL: https://build.opensuse.org/request/show/770668 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-waitress?expand=0&rev=40 --- local-intersphinx-inventories.patch | 13 ------------- python-waitress.changes | 11 +++++++++++ python-waitress.spec | 10 ++++------ waitress-1.4.0.tar.gz | 3 --- waitress-1.4.3.tar.gz | 3 +++ 5 files changed, 18 insertions(+), 22 deletions(-) delete mode 100644 local-intersphinx-inventories.patch delete mode 100644 waitress-1.4.0.tar.gz create mode 100644 waitress-1.4.3.tar.gz diff --git a/local-intersphinx-inventories.patch b/local-intersphinx-inventories.patch deleted file mode 100644 index fb7e703..0000000 --- a/local-intersphinx-inventories.patch +++ /dev/null @@ -1,13 +0,0 @@ -Index: b/docs/conf.py -=================================================================== ---- a/docs/conf.py -+++ b/docs/conf.py -@@ -32,7 +32,7 @@ extensions = [ - ] - - intersphinx_mapping = { -- 'python': ('https://docs.python.org/3/', None), -+ 'python': ('https://docs.python.org/3/', 'python3.inv'), - } - - # Add any paths that contain templates here, relative to this directory. diff --git a/python-waitress.changes b/python-waitress.changes index 2c50106..3f4ac57 100644 --- a/python-waitress.changes +++ b/python-waitress.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Thu Feb 6 17:29:20 UTC 2020 - Marketa Calabkova + +- update to 1.4.3 + * Waitress did not properly validate that the HTTP headers it received + were properly formed, thereby potentially allowing a front-end server + to treat a request different from Waitress. This could lead to HTTP + request smuggling/splitting. +- drop patch local-intersphinx-inventories.patch + * it was commented out, anyway + ------------------------------------------------------------------- Fri Dec 20 18:28:24 UTC 2019 - Dirk Mueller diff --git a/python-waitress.spec b/python-waitress.spec index de531a4..ba5829e 100644 --- a/python-waitress.spec +++ b/python-waitress.spec @@ -1,7 +1,7 @@ # # spec file for package python-waitress # -# Copyright (c) 2019 SUSE LLC +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-waitress -Version: 1.4.0 +Version: 1.4.3 Release: 0 Summary: Waitress WSGI server License: ZPL-2.1 @@ -29,16 +29,15 @@ Source: https://files.pythonhosted.org/packages/source/w/waitress/waitre # https://docs.python.org/3/objects.inv -> python3.inv Source1: python3.inv Source2: fetch-intersphinx-inventories.sh -Patch: local-intersphinx-inventories.patch BuildRequires: %{python_module setuptools} BuildRequires: fdupes BuildRequires: python-rpm-macros +BuildArch: noarch # SECTION documentation requirements BuildRequires: python3-Sphinx BuildRequires: python3-docutils BuildRequires: python3-pylons-sphinx-themes # /SECTION -BuildArch: noarch %python_subpackages %description @@ -59,8 +58,7 @@ This package contains documentation files for %{name}. %prep %setup -q -n waitress-%{version} -#%patch -p1 -cp %{S:1} docs/ +cp %{SOURCE1} docs/ %build %python_build diff --git a/waitress-1.4.0.tar.gz b/waitress-1.4.0.tar.gz deleted file mode 100644 index dc222ab..0000000 --- a/waitress-1.4.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b3b6450106b65bfcbefce5940fff23240305db86683cbf4e524af199b514ba61 -size 170493 diff --git a/waitress-1.4.3.tar.gz b/waitress-1.4.3.tar.gz new file mode 100644 index 0000000..af06ae9 --- /dev/null +++ b/waitress-1.4.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:045b3efc3d97c93362173ab1dfc159b52cfa22b46c3334ffc805dbdbf0e4309e +size 173767