From c695e9fa7f3d15ff16ef935bfd40cac6aabd36bc18b81210df20af0ff69db08d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mark=C3=A9ta=20Machov=C3=A1?= Date: Fri, 11 Nov 2022 13:23:06 +0000 Subject: [PATCH] Accepting request 1035109 from home:yarunachalam:branches:devel:languages:python - Update to v2.0.0 * BREAKING: Drop Python 3.5 and 3.6 support. * BREAKING: On connect, if the server supports STARTTLS, automatically try to upgrade the connection. STARTTLS after connect can be turned on or off explicitly by passing start_tls=True or start_tls=False respectively. * BREAKING: Remove deprecated loop keyword argument for the SMTP class. * Change: The source_address argument now takes a (addr, port) tuple that is passed as the local_addr param to asyncio.create_connection, allowing for binding to a specific IP. The new local_hostname argument that takes the value to be sent to the server with the EHLO/HELO message. This behaviour more closely matches smtplib. * In order to not break existing usage, passing a string instead of a tuple to source_address will give a DeprecationWarning, and use the value as it if had been passed for local_hostname. * Thanks @rafaelrds and @davidmcnabnz for raising and contributing work on this issue. * Bugfix: the mail_options and rcpt_options arguments to the send coroutine no longer cause errors * Cleanup: Refactored SMTP parent classes to remove complex inheritance structure. * Cleanup: Switched to asyncio.run for sync client methods. * Cleanup: Don't use private email.message.Message policy attribute (instead, set an appropriate policy based on message class) - Update to v1.1.7 * Security: Fix a possible injection vulnerability (a variant of https://consensys.net/diligence/vulnerabilities/python-smtplib-multiple-crlf-injection/) * Note that in order to exploit this vulnerability in aiosmtplib, the attacker would need control of the hostname or source_address parameters. Thanks Sam Sanoop @ Snyk for bringing this to my attention. * Bugfix: include CHANGLOG in sdist release * Type hints: fix type hints for async context exit (credit @JelleZijlstra) OBS-URL: https://build.opensuse.org/request/show/1035109 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-aiosmtplib?expand=0&rev=16 --- aiosmtplib-1.1.6.tar.gz | 3 --- aiosmtplib-2.0.0.tar.gz | 3 +++ python-aiosmtplib.changes | 26 ++++++++++++++++++++++++++ python-aiosmtplib.spec | 4 +++- 4 files changed, 32 insertions(+), 4 deletions(-) delete mode 100644 aiosmtplib-1.1.6.tar.gz create mode 100644 aiosmtplib-2.0.0.tar.gz diff --git a/aiosmtplib-1.1.6.tar.gz b/aiosmtplib-1.1.6.tar.gz deleted file mode 100644 index 2d0e60e..0000000 --- a/aiosmtplib-1.1.6.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d138fe6ffecbc9e6320269690b9ac0b75e540ef96e8f5c77d4a306760014dce2 -size 55637 diff --git a/aiosmtplib-2.0.0.tar.gz b/aiosmtplib-2.0.0.tar.gz new file mode 100644 index 0000000..abae8c8 --- /dev/null +++ b/aiosmtplib-2.0.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:188230c5baee6851244a87ebc3390b714815d7c15360953c672caf170acb5474 +size 55843 diff --git a/python-aiosmtplib.changes b/python-aiosmtplib.changes index 1f3cd4e..63aaddb 100644 --- a/python-aiosmtplib.changes +++ b/python-aiosmtplib.changes @@ -1,3 +1,29 @@ +------------------------------------------------------------------- +Thu Nov 10 16:08:50 UTC 2022 - Yogalakshmi Arunachalam + +- Update to v2.0.0 + * BREAKING: Drop Python 3.5 and 3.6 support. + * BREAKING: On connect, if the server supports STARTTLS, automatically try to upgrade the connection. + STARTTLS after connect can be turned on or off explicitly by passing start_tls=True or start_tls=False respectively. + * BREAKING: Remove deprecated loop keyword argument for the SMTP class. + * Change: The source_address argument now takes a (addr, port) tuple that is passed as the local_addr param to asyncio.create_connection, + allowing for binding to a specific IP. The new local_hostname argument that takes the value to be sent to the server with the EHLO/HELO message. + This behaviour more closely matches smtplib. + * In order to not break existing usage, passing a string instead of a tuple to source_address will give a DeprecationWarning, + and use the value as it if had been passed for local_hostname. + * Thanks @rafaelrds and @davidmcnabnz for raising and contributing work on this issue. + * Bugfix: the mail_options and rcpt_options arguments to the send coroutine no longer cause errors + * Cleanup: Refactored SMTP parent classes to remove complex inheritance structure. + * Cleanup: Switched to asyncio.run for sync client methods. + * Cleanup: Don't use private email.message.Message policy attribute (instead, set an appropriate policy based on message class) + +- Update to v1.1.7 + * Security: Fix a possible injection vulnerability (a variant of https://consensys.net/diligence/vulnerabilities/python-smtplib-multiple-crlf-injection/) + * Note that in order to exploit this vulnerability in aiosmtplib, the attacker would need control of the hostname or source_address parameters. + Thanks Sam Sanoop @ Snyk for bringing this to my attention. + * Bugfix: include CHANGLOG in sdist release + * Type hints: fix type hints for async context exit (credit @JelleZijlstra) + ------------------------------------------------------------------- Sat Jan 15 17:24:42 UTC 2022 - Dirk Müller diff --git a/python-aiosmtplib.spec b/python-aiosmtplib.spec index 93d5701..f10d57c 100644 --- a/python-aiosmtplib.spec +++ b/python-aiosmtplib.spec @@ -20,14 +20,16 @@ %define skip_python2 1 %define skip_python36 1 Name: python-aiosmtplib -Version: 1.1.6 +Version: 2.0.0 Release: 0 Summary: Python asyncio SMTP client License: MIT Group: Development/Languages/Python URL: https://github.com/cole/aiosmtplib Source: https://files.pythonhosted.org/packages/source/a/aiosmtplib/aiosmtplib-%{version}.tar.gz +BuildRequires: %{python_module exceptiongroup} BuildRequires: %{python_module setuptools} +BuildRequires: %{python_module trustme} BuildRequires: fdupes BuildRequires: python-rpm-macros Suggests: python-aiosmtpd