python/python-h2
SHA256
14
0
Fork 0
forked from pool/python-h2
Code Pull Requests Activity

- Update to 4.3.0 (fixes CVE-2025-57804, bsc#1248737)

Browse Source 
* API Changes (Backward Incompatible)
    - Reject header names and values containing illegal characters, based on
      RFC 9113, section 8.2.1. The main Python API is compatible, but some
      previously valid requests/response headers might now be blocked. Use the
      `validate_inbound_headers` config option if needed. Thanks to Sebastiano
      Sartor (sebsrt) for the report.
  * API Changes (Backward Compatible)
    - h2 events now have tighter type bounds, e.g. `stream_id` is guaranteed to
      not be `None` for most events now. This simplifies downstream type
      checking.
    - Various typing-related improvements.
  * Bugfixes
    - Fix error value when opening a new stream on too many open streams.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-h2?expand=0&rev=39
This commit is contained in:
Markéta Machová
2025-08-26 12:40:51 +00:00
committed by Git OBS Bridge
parent 7200eea356
commit 9ee9289968
4 changed files with 23 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
python-h2.changes
View File

@@ -1,3 +1,21 @@
-------------------------------------------------------------------
Tue Aug 26 11:28:51 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
- Update to 4.3.0 (fixes CVE-2025-57804, bsc#1248737)
* API Changes (Backward Incompatible)
- Reject header names and values containing illegal characters, based on
RFC 9113, section 8.2.1. The main Python API is compatible, but some
previously valid requests/response headers might now be blocked. Use the
`validate_inbound_headers` config option if needed. Thanks to Sebastiano
Sartor (sebsrt) for the report.
* API Changes (Backward Compatible)
- h2 events now have tighter type bounds, e.g. `stream_id` is guaranteed to
not be `None` for most events now. This simplifies downstream type
checking.
- Various typing-related improvements.
* Bugfixes
- Fix error value when opening a new stream on too many open streams.
-------------------------------------------------------------------
Tue Feb 11 09:03:44 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>