forked from pool/python-dnspython
7b86e53169
* The Tudoor fix ate legitimate Truncated exceptions, preventing
the resolver from failing over to TCP and causing the query to
timeout.
- Update to version 2.6.0
* As mentioned in the “TuDoor” paper and the associated
CVE-2023-29483, the dnspython stub resolver is vulnerable to a
potential DoS if a bad-in-some-way response from the right
address and port forged by an attacker arrives before a
legitimate one on the UDP port dnspython is using for that
query.
This release addresses the issue by adopting the recommended
mitigation, which is ignoring the bad packets and continuing to
listen for a legitimate response until the timeout for the
query has expired.
* Added support for the NSID EDNS option.
* Dnspython now looks for version metadata for optional packages
and will not use them if they are too old. This prevents
possible exceptions when a feature like DoH is not desired in
dnspython, but an old httpx is installed along with
dnspython for some other purpose.
* The DoHNameserver class now allows GET to be used instead of
the default POST, and also passes source and source_port
correctly to the underlying query methods.
- Update to version 2.5.0
* Dnspython now uses hatchling for builds.
* Cython is no longer supported due to various typing issues.
* Dnspython now explicitly canonicalizes IPv4 and IPv6 addresses.
Previously it was possible for non-canonical IPv6 forms to be
stored in a AAAA address, which would work correctly but
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-dnspython?expand=0&rev=76
126 lines
3.6 KiB
RPMSpec
126 lines
3.6 KiB
RPMSpec
#
|
|
# spec file for package python-dnspython
|
|
#
|
|
# Copyright (c) 2024 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%global flavor @BUILD_FLAVOR@%{nil}
|
|
%if "%{flavor}" == "test"
|
|
%define psuffix -test
|
|
%bcond_without test
|
|
%else
|
|
%define psuffix %{nil}
|
|
%bcond_with test
|
|
%endif
|
|
%define skip_python2 1
|
|
%{?sle15_python_module_pythons}
|
|
Name: python-dnspython%{psuffix}
|
|
Version: 2.6.1
|
|
Release: 0
|
|
Summary: A DNS toolkit for Python
|
|
License: ISC
|
|
Group: Development/Languages/Python
|
|
URL: https://github.com/rthalley/dnspython
|
|
Source: https://files.pythonhosted.org/packages/source/d/dnspython/dnspython-%{version}.tar.gz
|
|
BuildRequires: %{python_module base >= 3.8}
|
|
BuildRequires: %{python_module hatchling}
|
|
BuildRequires: %{python_module pip}
|
|
BuildRequires: %{python_module poetry-core}
|
|
BuildRequires: fdupes
|
|
BuildRequires: python-rpm-macros
|
|
# dnssec
|
|
Requires: python-cryptography
|
|
Requires: python-httpx
|
|
# idna
|
|
Requires: python-idna >= 2.1
|
|
# HTTP/2 support in httpx
|
|
Recommends: python-h2
|
|
# trio
|
|
Suggests: python-trio >= 0.14.0
|
|
BuildArch: noarch
|
|
%if %{with test}
|
|
# dnssec
|
|
BuildRequires: %{python_module cryptography}
|
|
# BuildRequires: %%{python_module curio >= 1.2}
|
|
BuildRequires: %{python_module h2}
|
|
# doh:
|
|
BuildRequires: %{python_module httpx}
|
|
# idna
|
|
BuildRequires: %{python_module idna}
|
|
BuildRequires: %{python_module pytest}
|
|
BuildRequires: %{python_module requests-toolbelt}
|
|
BuildRequires: %{python_module requests}
|
|
# # curio
|
|
# BuildRequires: %%{python_module sniffio >= 1.1}
|
|
# trio
|
|
BuildRequires: %{python_module trio >= 0.14.0}
|
|
BuildRequires: %{python_module typing}
|
|
BuildRequires: netcfg
|
|
BuildRequires: (python3-contextvars if python3-base < 3.7)
|
|
%endif
|
|
%if 0%{?python_version_nodots} < 37
|
|
Requires: python-contextvars
|
|
%endif
|
|
%python_subpackages
|
|
|
|
%description
|
|
dnspython is a DNS toolkit for Python. It supports almost all
|
|
record types. It can be used for queries, zone transfers, and
|
|
dynamic updates. It supports TSIG authenticated messages and EDNS0.
|
|
|
|
dnspython provides both high and low level access to DNS. The high
|
|
level classes perform queries for data of a given name, type, and
|
|
class, and return an answer set. The low level classes allow direct
|
|
manipulation of DNS zones, messages, names, and records.
|
|
|
|
The package requires dependencies necessary for these optional features:
|
|
- DNS over HTTPS (doh)
|
|
- IDNA
|
|
- DNSSEC
|
|
and suggest dependencies necessary for these optional features:
|
|
- trio
|
|
This optional feature is not available due to missing dependencies:
|
|
- wmi
|
|
|
|
%prep
|
|
%setup -q -n dnspython-%{version}
|
|
chmod -x examples/*
|
|
# https://github.com/rthalley/dnspython/pull/755
|
|
chmod -x dns/win32util.py
|
|
|
|
%build
|
|
%pyproject_wheel
|
|
|
|
%if !%{with test}
|
|
%install
|
|
%pyproject_install
|
|
%python_expand %fdupes %{buildroot}%{$python_sitelib}/
|
|
%endif
|
|
|
|
%if %{with test}
|
|
%check
|
|
%pytest
|
|
%endif
|
|
|
|
%if !%{with test}
|
|
%files %{python_files}
|
|
%license LICENSE
|
|
%doc README.md examples/
|
|
%{python_sitelib}/dns
|
|
%{python_sitelib}/dnspython-%{version}.dist-info
|
|
%endif
|
|
|
|
%changelog
|