Change log for python-urllib3 package in openKylin

python-urllib3 (2.0.7-ok3) nile; urgency=medium

  * SECURITY UPDATE: The Proxy-Authorization header is not correctly
    stripped     when redirecting to a different host.     -
    debian/patches/CVE-2024-37891.patch: Add Proxy-Authorization to
    DEFAULT_REMOVE_HEADERS_ON_REDIRECT in src/urllib3/util/retry.py. Add
    header to tests.     - CVE-2024-37891   * Skip failing test causing
    build-time failures: (LP: #2084715)     - debian/rules: Add not
    test_recent_date to PYBUILD_TEST_ARGS.

 -- liubo01 <email address hidden>  Tue, 05 Nov 2024 09:23:22 +0800

Available diffs

• diff from 2.0.7-ok2 to 2.0.7-ok3 (2.0 KiB)

python-urllib3 (2.0.7-ok2) nile; urgency=medium

  * Add patch: github issue#3206, issue#3271.

 -- liwenjun <email address hidden>  Wed, 05 Jun 2024 10:35:21 +0800

Available diffs

• diff from 1.25.8-ok3 to 2.0.7-ok2 (349.2 KiB)
• diff from 2.0.7-ok1 to 2.0.7-ok2 (2.5 KiB)

python-urllib3 (2.0.7-ok1) nile; urgency=medium

  * Build for openKylin.

 -- Luoyaoming <email address hidden>  Tue, 30 Apr 2024 18:10:21 +0800

Available diffs

• diff from 1.25.8-ok3 to 2.0.7-ok1 (347.5 KiB)

python-urllib3 (1.25.8-ok3) yangtze; urgency=medium

  * jyadll CVE-2021-33503 安全更新:在鉴权模块的URL中添加@参数导致资源管理错误

 -- zhanghongyang <email address hidden>  Tue, 21 Feb 2023 20:57:51 +0800

Available diffs

• diff from 1.25.8-ok1 (in Openkylin) to 1.25.8-ok3 (2.7 KiB)
• diff from 1.25.8-ok2 to 1.25.8-ok3 (1.7 KiB)

python-urllib3 (1.25.8-ok2) yangtze; urgency=medium

  * jyadll CVE-2020-26137 安全更新:可以在putrequest()的第一个参数中插入CR和LF控制字符

 -- zhanghongyang <email address hidden>  Tue, 21 Feb 2023 15:45:32 +0800

Available diffs

• diff from 1.25.8-ok1 (in Openkylin) to 1.25.8-ok2 (1.7 KiB)

python-urllib3 (1.25.8-ok1) yangtze; urgency=medium

  * Build for openKylin.

 -- openKylinBot <email address hidden>  Mon, 25 Apr 2022 22:03:04 +0800