Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-httptools for openSUSE:Factory checked in at 2022-10-14 15:40:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-httptools (Old) and /work/SRC/openSUSE:Factory/.python-httptools.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-httptools" Fri Oct 14 15:40:24 2022 rev:4 rq:1010137 version:0.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-httptools/python-httptools.changes 2022-08-04 13:23:34.176516728 +0200 +++ /work/SRC/openSUSE:Factory/.python-httptools.new.2275/python-httptools.changes 2022-10-14 15:40:40.971732402 +0200 @@ -1,0 +2,10 @@ +Wed Oct 12 03:35:36 UTC 2022 - Yogalakshmi Arunachalam <yarunacha...@suse.com> + +- Update to version 0.5.0 + * Bump bundled llhttp to 6.0.9 + * fixes CVE-2022-32213, CVE-2022-32214, CVE-2022-32215 + (by @nlsj1985 in 56d6a16 for #83) + * Test and build against Python 3.11 + (by @elprans in 509cd14 for #84) + +------------------------------------------------------------------- Old: ---- httptools-0.4.0.tar.gz New: ---- httptools-0.5.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-httptools.spec ++++++ --- /var/tmp/diff_new_pack.RhY3Da/_old 2022-10-14 15:40:41.631733504 +0200 +++ /var/tmp/diff_new_pack.RhY3Da/_new 2022-10-14 15:40:41.631733504 +0200 @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python3-%{**}} %define skip_python2 1 Name: python-httptools -Version: 0.4.0 +Version: 0.5.0 Release: 0 Summary: Python framework independent HTTP protocol utils License: MIT ++++++ httptools-0.4.0.tar.gz -> httptools-0.5.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/httptools-0.4.0/.github/workflows/release.yml new/httptools-0.5.0/.github/workflows/release.yml --- old/httptools-0.4.0/.github/workflows/release.yml 2022-02-22 19:41:30.000000000 +0100 +++ new/httptools-0.5.0/.github/workflows/release.yml 2022-09-13 06:55:45.000000000 +0200 @@ -78,6 +78,7 @@ - "cp38-*" - "cp39-*" - "cp310-*" + - "cp311-*" exclude: - os: ubuntu-latest cibw_arch: universal2 @@ -113,7 +114,7 @@ with: platforms: arm64 - - uses: pypa/cibuildwheel@v2.2.2 + - uses: pypa/cibuildwheel@v2.9.0 env: CIBW_BUILD_VERBOSITY: 1 CIBW_BUILD: ${{ matrix.cibw_python }} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/httptools-0.4.0/.github/workflows/tests.yml new/httptools-0.5.0/.github/workflows/tests.yml --- old/httptools-0.4.0/.github/workflows/tests.yml 2022-02-22 19:41:30.000000000 +0100 +++ new/httptools-0.5.0/.github/workflows/tests.yml 2022-09-13 06:55:45.000000000 +0200 @@ -14,7 +14,7 @@ runs-on: ${{ matrix.os }} strategy: matrix: - python-version: ["3.5", "3.6", "3.7", "3.8", "3.9", "3.10"] + python-version: ["3.5", "3.6", "3.7", "3.8", "3.9", "3.10", "3.11.0-rc.2"] os: [windows-latest, ubuntu-latest, macos-latest] exclude: # Python 3.5 is unable to properly diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/httptools-0.4.0/.gitmodules new/httptools-0.5.0/.gitmodules --- old/httptools-0.4.0/.gitmodules 2022-02-22 19:41:30.000000000 +0100 +++ new/httptools-0.5.0/.gitmodules 2022-09-13 06:55:45.000000000 +0200 @@ -4,3 +4,4 @@ [submodule "vendor/llhttp"] path = vendor/llhttp url = https://github.com/nodejs/llhttp.git + branch = release diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/httptools-0.4.0/httptools/_version.py new/httptools-0.5.0/httptools/_version.py --- old/httptools-0.4.0/httptools/_version.py 2022-02-22 19:41:30.000000000 +0100 +++ new/httptools-0.5.0/httptools/_version.py 2022-09-13 06:55:45.000000000 +0200 @@ -10,4 +10,4 @@ # supported platforms, publish the packages on PyPI, merge the PR # to the target branch, create a Git tag pointing to the commit. -__version__ = '0.4.0' +__version__ = '0.5.0' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/httptools-0.4.0/tests/test_parser.py new/httptools-0.5.0/tests/test_parser.py --- old/httptools-0.4.0/tests/test_parser.py 2022-02-22 19:41:30.000000000 +0100 +++ new/httptools-0.5.0/tests/test_parser.py 2022-09-13 06:55:45.000000000 +0200 @@ -16,7 +16,7 @@ Accept-Ranges: bytes Connection: close -''' +'''.replace(b'\n', b'\r\n') RESPONSE1_BODY = b''' <html> @@ -29,31 +29,31 @@ </html>''' -CHUNKED_REQUEST1_1 = b'''POST /test.php?a=b+c HTTP/1.2 -User-Agent: Fooo -Host: bar -Transfer-Encoding: chunked +CHUNKED_REQUEST1_1 = b'''POST /test.php?a=b+c HTTP/1.1\r +User-Agent: Fooo\r +Host: bar\r +Transfer-Encoding: chunked\r 5\r\nhello\r\n6\r\n world\r\n''' CHUNKED_REQUEST1_2 = b'''0\r\nVary: *\r\nUser-Agent: spam\r\n\r\n''' -CHUNKED_REQUEST1_3 = b'''POST /test.php?a=b+c HTTP/1.2 -User-Agent: Fooo -Host: bar -Transfer-Encoding: chunked +CHUNKED_REQUEST1_3 = b'''POST /test.php?a=b+c HTTP/1.1\r +User-Agent: Fooo\r +Host: bar\r +Transfer-Encoding: chunked\r b\r\n+\xce\xcfM\xb5MI,I\x04\x00\r\n0\r\n\r\n''' -UPGRADE_REQUEST1 = b'''GET /demo HTTP/1.1 -Host: example.com -Connection: Upgrade -Sec-WebSocket-Key2: 12998 5 Y3 1 .P00 -Sec-WebSocket-Protocol: sample -Upgrade: WebSocket -Sec-WebSocket-Key1: 4 @1 46546xW%0l 1 5 -Origin: http://example.com +UPGRADE_REQUEST1 = b'''GET /demo HTTP/1.1\r +Host: example.com\r +Connection: Upgrade\r +Sec-WebSocket-Key2: 12998 5 Y3 1 .P00\r +Sec-WebSocket-Protocol: sample\r +Upgrade: WebSocket\r +Sec-WebSocket-Key1: 4 @1 46546xW%0l 1 5\r +Origin: http://example.com\r Hot diggity dogg''' @@ -233,7 +233,7 @@ m.on_message_begin.assert_called_once_with() m.on_url.assert_called_once_with(b'/test.php?a=b+c') - self.assertEqual(p.get_http_version(), '1.2') + self.assertEqual(p.get_http_version(), '1.1') m.on_header.assert_called_with(b'Transfer-Encoding', b'chunked') m.on_chunk_header.assert_called_with() @@ -316,7 +316,7 @@ self.assertEqual(p.get_method(), b'POST') m.on_url.assert_called_once_with(b'/test.php?a=b+c') - self.assertEqual(p.get_http_version(), '1.2') + self.assertEqual(p.get_http_version(), '1.1') m.on_header.assert_called_with(b'Transfer-Encoding', b'chunked') m.on_chunk_header.assert_called_with() @@ -439,17 +439,17 @@ def test_parser_request_2(self): p = httptools.HttpRequestParser(None) with self.assertRaises(httptools.HttpParserInvalidMethodError): - p.feed_data(b'SPAM /test.php?a=b+c HTTP/1.2') + p.feed_data(b'SPAM /test.php?a=b+c HTTP/1.1') def test_parser_request_3(self): p = httptools.HttpRequestParser(None) with self.assertRaises(httptools.HttpParserInvalidURLError): - p.feed_data(b'POST HTTP/1.2') + p.feed_data(b'POST HTTP/1.1') def test_parser_request_4(self): p = httptools.HttpRequestParser(None) with self.assertRaisesRegex(TypeError, 'a bytes-like object'): - p.feed_data('POST HTTP/1.2') + p.feed_data('POST HTTP/1.1') def test_parser_request_fragmented(self): m = mock.Mock()