From 022a931264a366b1ce171ee0cabb882d1377eb93f5540f5b88d537c1ebf1b9cb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mark=C3=A9ta=20Machov=C3=A1?= Date: Tue, 21 May 2024 12:50:09 +0000 Subject: [PATCH 1/2] Accepting request 1175561 from home:mcalabkova:branches:devel:languages:python:pytest - Update to 2.32.1 * Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (bsc#1224788, CVE-2024-35195) * verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. * Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. * Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7. * Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling. OBS-URL: https://build.opensuse.org/request/show/1175561 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=182 --- python-requests.changes | 15 +++++++++++++++ python-requests.spec | 9 +++------ requests-2.31.0.tar.gz | 3 --- requests-2.32.1.tar.gz | 3 +++ 4 files changed, 21 insertions(+), 9 deletions(-) delete mode 100644 requests-2.31.0.tar.gz create mode 100644 requests-2.32.1.tar.gz diff --git a/python-requests.changes b/python-requests.changes index ed5faa3..aad2991 100644 --- a/python-requests.changes +++ b/python-requests.changes @@ -1,3 +1,18 @@ +------------------------------------------------------------------- +Tue May 21 12:33:41 UTC 2024 - Markéta Machová + +- Update to 2.32.1 + * Fixed an issue where setting verify=False on the first request from a Session + will cause subsequent requests to the same origin to also ignore cert verification, + regardless of the value of verify. (bsc#1224788, CVE-2024-35195) + * verify=True now reuses a global SSLContext which should improve request time + variance between first and subsequent requests. + * Requests now supports optional use of character detection (chardet or charset_normalizer) + when repackaged or vendored. This enables pip and other projects to minimize their + vendoring surface area. + * Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7. + * Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling. + ------------------------------------------------------------------- Mon Sep 11 20:41:40 UTC 2023 - Dirk Müller diff --git a/python-requests.spec b/python-requests.spec index 15a42a6..42decd6 100644 --- a/python-requests.spec +++ b/python-requests.spec @@ -1,7 +1,7 @@ # -# spec file +# spec file for package python-requests # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,7 +26,7 @@ %endif %{?sle15_python_module_pythons} Name: python-requests%{psuffix} -Version: 2.31.0 +Version: 2.32.1 Release: 0 Summary: Python HTTP Library License: Apache-2.0 @@ -89,9 +89,6 @@ Features of Requests: %prep %autosetup -p1 -n requests-%{version} -# drop shebang from certs.py -sed -i '1s/^#!.*$//' requests/certs.py - # remove 'never' default parameter from digest-auth check # requires httpbin 0.6.0 sed -i "s#\(httpbin.*\), 'never'#\1#" tests/test_requests.py diff --git a/requests-2.31.0.tar.gz b/requests-2.31.0.tar.gz deleted file mode 100644 index 74eeead..0000000 --- a/requests-2.31.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:942c5a758f98d790eaed1a29cb6eefc7ffb0d1cf7af05c3d2791656dbd6ad1e1 -size 110794 diff --git a/requests-2.32.1.tar.gz b/requests-2.32.1.tar.gz new file mode 100644 index 0000000..5ca12c5 --- /dev/null +++ b/requests-2.32.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:eb97e87e64c79e64e5b8ac75cee9dd1f97f49e289b083ee6be96268930725685 +size 129920 From a8abd1de39249718b19002bcbb5e5fd802eedfffdba2577dd556d77c61c5663b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mark=C3=A9ta=20Machov=C3=A1?= Date: Wed, 22 May 2024 14:11:59 +0000 Subject: [PATCH 2/2] Accepting request 1175866 from home:mcalabkova:branches:devel:languages:python - Update to 2.32.2 * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0. OBS-URL: https://build.opensuse.org/request/show/1175866 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=183 --- python-requests.changes | 9 +++++++++ python-requests.spec | 2 +- requests-2.32.1.tar.gz | 3 --- requests-2.32.2.tar.gz | 3 +++ 4 files changed, 13 insertions(+), 4 deletions(-) delete mode 100644 requests-2.32.1.tar.gz create mode 100644 requests-2.32.2.tar.gz diff --git a/python-requests.changes b/python-requests.changes index aad2991..e9d3cb7 100644 --- a/python-requests.changes +++ b/python-requests.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Wed May 22 14:00:50 UTC 2024 - Markéta Machová + +- Update to 2.32.2 + * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, + we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing + custom HTTPAdapters will need to migrate their code to use this new API. get_connection is + considered deprecated in all versions of Requests>=2.32.0. + ------------------------------------------------------------------- Tue May 21 12:33:41 UTC 2024 - Markéta Machová diff --git a/python-requests.spec b/python-requests.spec index 42decd6..90d1061 100644 --- a/python-requests.spec +++ b/python-requests.spec @@ -26,7 +26,7 @@ %endif %{?sle15_python_module_pythons} Name: python-requests%{psuffix} -Version: 2.32.1 +Version: 2.32.2 Release: 0 Summary: Python HTTP Library License: Apache-2.0 diff --git a/requests-2.32.1.tar.gz b/requests-2.32.1.tar.gz deleted file mode 100644 index 5ca12c5..0000000 --- a/requests-2.32.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:eb97e87e64c79e64e5b8ac75cee9dd1f97f49e289b083ee6be96268930725685 -size 129920 diff --git a/requests-2.32.2.tar.gz b/requests-2.32.2.tar.gz new file mode 100644 index 0000000..47f4b74 --- /dev/null +++ b/requests-2.32.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dd951ff5ecf3e3b3aa26b40703ba77495dab41da839ae72ef3c8e5d8e2433289 +size 130327