SHA256
14
0
forked from pool/python-h2

- Update to 4.3.0 (fixes CVE-2025-57804, bsc#1248737)

* API Changes (Backward Incompatible)
    - Reject header names and values containing illegal characters, based on
      RFC 9113, section 8.2.1. The main Python API is compatible, but some
      previously valid requests/response headers might now be blocked. Use the
      `validate_inbound_headers` config option if needed. Thanks to Sebastiano
      Sartor (sebsrt) for the report.
  * API Changes (Backward Compatible)
    - h2 events now have tighter type bounds, e.g. `stream_id` is guaranteed to
      not be `None` for most events now. This simplifies downstream type
      checking.
    - Various typing-related improvements.
  * Bugfixes
    - Fix error value when opening a new stream on too many open streams.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-h2?expand=0&rev=39
This commit is contained in:
2025-08-26 12:40:51 +00:00
committed by Git OBS Bridge
parent 7200eea356
commit 9ee9289968
4 changed files with 23 additions and 7 deletions

View File

@@ -1,7 +1,7 @@
#
# spec file for package python-h2
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,11 +16,9 @@
#
%{?!python_module:%define python_module() python3-%{**}}
%define skip_python2 1
%{?sle15_python_module_pythons}
Name: python-h2
Version: 4.2.0
Version: 4.3.0
Release: 0
Summary: HTTP/2 State-Machine based protocol implementation
License: MIT