Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-hpack for openSUSE:Factory checked in at 2026-08-19 17:55:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-hpack (Old) and /work/SRC/openSUSE:Factory/.python-hpack.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-hpack" Wed Aug 19 17:55:16 2026 rev:10 rq:1371691 version:4.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-hpack/python-hpack.changes 2025-02-05 12:40:05.759733354 +0100 +++ /work/SRC/openSUSE:Factory/.python-hpack.new.1258/python-hpack.changes 2026-08-19 17:55:21.378611109 +0200 @@ -1,0 +2,13 @@ +Tue Aug 18 08:24:34 UTC 2026 - Nico Krapp <[email protected]> + +- Update to 4.2.0 (fixes boo#1275232 and CVE-2026-59980) + * Support for Python 3.9 has been removed. + * Support for PyPy 3.9 has been removed. + * Support for Python 3.14 has been added. + * Headers marked as sensitive will no longer log their value at DEBUG level. + Instead a placeholder value of SENSITIVE_REDACTED is logged. + * Fixed perfect match missed for headers with empty values. + * Restricted variable integer decoding to uint32 to prevent run-away + computation. With thanks to Hiroki Nishino. + +------------------------------------------------------------------- Old: ---- hpack-4.1.0.tar.gz test_fixtures.tar.xz New: ---- hpack-4.2.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-hpack.spec ++++++ --- /var/tmp/diff_new_pack.XXkF3k/_old 2026-08-19 17:55:24.366719060 +0200 +++ /var/tmp/diff_new_pack.XXkF3k/_new 2026-08-19 17:55:24.367719097 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-hpack # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,17 +16,14 @@ # -%{?!python_module:%define python_module() python-%{**} python3-%{**}} %{?sle15_python_module_pythons} Name: python-hpack -Version: 4.1.0 +Version: 4.2.0 Release: 0 Summary: Pure-Python HPACK header compression License: MIT URL: https://github.com/python-hyper/hpack -Source0: https://files.pythonhosted.org/packages/source/h/hpack/hpack-%{version}.tar.gz -# Content of https://github.com/python-hyper/hpack/tree/master/test/test_fixtures -Source1: test_fixtures.tar.xz +Source0: https://github.com/python-hyper/hpack/archive/refs/tags/v%{version}.tar.gz#/hpack-%{version}.tar.gz Patch0: healthcheck.patch BuildRequires: %{python_module hypothesis} BuildRequires: %{python_module pip} @@ -44,7 +41,7 @@ automatically enables the use of nghttp2 if it’s available. %prep -%autosetup -p1 -a1 -n hpack-%{version} +%autosetup -p1 -n hpack-%{version} %build export LC_ALL="en_US.UTF-8" ++++++ hpack-4.1.0.tar.gz -> hpack-4.2.0.tar.gz ++++++ ++++ 1654662 lines of diff (skipped)
