Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-aiosmtplib for openSUSE:Factory checked in at 2022-11-12 17:41:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-aiosmtplib (Old) and /work/SRC/openSUSE:Factory/.python-aiosmtplib.new.1597 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-aiosmtplib" Sat Nov 12 17:41:07 2022 rev:8 rq:1035265 version:2.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-aiosmtplib/python-aiosmtplib.changes 2022-01-17 00:22:46.376189699 +0100 +++ /work/SRC/openSUSE:Factory/.python-aiosmtplib.new.1597/python-aiosmtplib.changes 2022-11-12 17:41:27.886273584 +0100 @@ -1,0 +2,26 @@ +Thu Nov 10 16:08:50 UTC 2022 - Yogalakshmi Arunachalam <yarunacha...@suse.com> + +- Update to v2.0.0 + * BREAKING: Drop Python 3.5 and 3.6 support. + * BREAKING: On connect, if the server supports STARTTLS, automatically try to upgrade the connection. + STARTTLS after connect can be turned on or off explicitly by passing start_tls=True or start_tls=False respectively. + * BREAKING: Remove deprecated loop keyword argument for the SMTP class. + * Change: The source_address argument now takes a (addr, port) tuple that is passed as the local_addr param to asyncio.create_connection, + allowing for binding to a specific IP. The new local_hostname argument that takes the value to be sent to the server with the EHLO/HELO message. + This behaviour more closely matches smtplib. + * In order to not break existing usage, passing a string instead of a tuple to source_address will give a DeprecationWarning, + and use the value as it if had been passed for local_hostname. + * Thanks @rafaelrds and @davidmcnabnz for raising and contributing work on this issue. + * Bugfix: the mail_options and rcpt_options arguments to the send coroutine no longer cause errors + * Cleanup: Refactored SMTP parent classes to remove complex inheritance structure. + * Cleanup: Switched to asyncio.run for sync client methods. + * Cleanup: Don't use private email.message.Message policy attribute (instead, set an appropriate policy based on message class) + +- Update to v1.1.7 + * Security: Fix a possible injection vulnerability (a variant of https://consensys.net/diligence/vulnerabilities/python-smtplib-multiple-crlf-injection/) + * Note that in order to exploit this vulnerability in aiosmtplib, the attacker would need control of the hostname or source_address parameters. + Thanks Sam Sanoop @ Snyk for bringing this to my attention. + * Bugfix: include CHANGLOG in sdist release + * Type hints: fix type hints for async context exit (credit @JelleZijlstra) + +------------------------------------------------------------------- Old: ---- aiosmtplib-1.1.6.tar.gz New: ---- aiosmtplib-2.0.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-aiosmtplib.spec ++++++ --- /var/tmp/diff_new_pack.c4XBkE/_old 2022-11-12 17:41:28.298276037 +0100 +++ /var/tmp/diff_new_pack.c4XBkE/_new 2022-11-12 17:41:28.306276084 +0100 @@ -20,14 +20,16 @@ %define skip_python2 1 %define skip_python36 1 Name: python-aiosmtplib -Version: 1.1.6 +Version: 2.0.0 Release: 0 Summary: Python asyncio SMTP client License: MIT Group: Development/Languages/Python URL: https://github.com/cole/aiosmtplib Source: https://files.pythonhosted.org/packages/source/a/aiosmtplib/aiosmtplib-%{version}.tar.gz +BuildRequires: %{python_module exceptiongroup} BuildRequires: %{python_module setuptools} +BuildRequires: %{python_module trustme} BuildRequires: fdupes BuildRequires: python-rpm-macros Suggests: python-aiosmtpd @@ -54,7 +56,7 @@ %python_expand %fdupes %{buildroot}%{$python_sitelib} %check -%pytest -rs -k 'not (test_qq_login or test_starttls_gmail)' +%pytest -rs %files %{python_files} %doc README.rst docs/*.rst ++++++ aiosmtplib-1.1.6.tar.gz -> aiosmtplib-2.0.0.tar.gz ++++++ ++++ 10517 lines of diff (skipped)