From 66f26a47f78a9d4f2de0fe6c99171ebdf07953234597f43d9490c7ba897048a8 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Fri, 10 Nov 2023 12:43:06 +0000 Subject: [PATCH] - update to 3.8.6: * Security bugfixes * Upgraded the vendored copy of llhttp_ to v9.1.3 * https://github.com/aio-libs/aiohttp/security/advisories/GHSA- pjjw-qhg8-p2p9. * Updated Python parser to comply with RFCs 9110/9112 * https://github.com/aio-libs/aiohttp/security/advisories/GHSA- gfw2-4jvh-wgfg. * Added ``fallback_charset_resolver`` parameter in ``ClientSession`` to allow a user-supplied character set detection function. Character set detection will no longer be included in 3.9 as a default. If this feature is needed, please use `fallback_charset_resolver * Enabled lenient response parsing for more flexible parsing in the client * Fixed ``PermissionError`` when ``.netrc`` is unreadable due to permissions. * Fixed output of parsing errors * Fixed ``GunicornWebWorker`` max_requests_jitter not working. * Fixed sorting in ``filter_cookies`` to use cookie with longest path. * Fixed display of ``BadStatusLine`` messages from llhttp_. OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-aiohttp?expand=0&rev=104 --- aiohttp-3.8.5.tar.gz | 3 --- aiohttp-3.8.6.tar.gz | 3 +++ python-aiohttp.changes | 27 +++++++++++++++++++++++++++ python-aiohttp.spec | 2 +- 4 files changed, 31 insertions(+), 4 deletions(-) delete mode 100644 aiohttp-3.8.5.tar.gz create mode 100644 aiohttp-3.8.6.tar.gz diff --git a/aiohttp-3.8.5.tar.gz b/aiohttp-3.8.5.tar.gz deleted file mode 100644 index e3d1b9b..0000000 --- a/aiohttp-3.8.5.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:b9552ec52cc147dbf1944ac7ac98af7602e51ea2dcd076ed194ca3c0d1c7d0bc -size 7358303 diff --git a/aiohttp-3.8.6.tar.gz b/aiohttp-3.8.6.tar.gz new file mode 100644 index 0000000..5290245 --- /dev/null +++ b/aiohttp-3.8.6.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b0cf2a4501bff9330a8a5248b4ce951851e415bdcce9dc158e76cfd55e15085c +size 7352172 diff --git a/python-aiohttp.changes b/python-aiohttp.changes index 5084cc0..7e6f6a3 100644 --- a/python-aiohttp.changes +++ b/python-aiohttp.changes @@ -1,3 +1,30 @@ +------------------------------------------------------------------- +Tue Nov 7 11:52:54 UTC 2023 - Dirk Müller + +- update to 3.8.6: + * Security bugfixes + * Upgraded the vendored copy of llhttp_ to v9.1.3 + * https://github.com/aio-libs/aiohttp/security/advisories/GHSA- + pjjw-qhg8-p2p9. + * Updated Python parser to comply with RFCs 9110/9112 + * https://github.com/aio-libs/aiohttp/security/advisories/GHSA- + gfw2-4jvh-wgfg. + * Added ``fallback_charset_resolver`` parameter in + ``ClientSession`` to allow a user-supplied + character set detection function. + Character set detection will no longer be included in 3.9 as + a default. If this feature is needed, + please use `fallback_charset_resolver + * Enabled lenient response parsing for more flexible parsing in + the client + * Fixed ``PermissionError`` when ``.netrc`` is unreadable due + to permissions. + * Fixed output of parsing errors + * Fixed ``GunicornWebWorker`` max_requests_jitter not working. + * Fixed sorting in ``filter_cookies`` to use cookie with + longest path. + * Fixed display of ``BadStatusLine`` messages from llhttp_. + ------------------------------------------------------------------- Sat Oct 14 17:27:26 UTC 2023 - Matej Cepl diff --git a/python-aiohttp.spec b/python-aiohttp.spec index e3259be..25f2ea8 100644 --- a/python-aiohttp.spec +++ b/python-aiohttp.spec @@ -21,7 +21,7 @@ %bcond_with docs %{?sle15_python_module_pythons} Name: python-aiohttp -Version: 3.8.5 +Version: 3.8.6 Release: 0 Summary: Asynchronous HTTP client/server framework License: Apache-2.0