Change logs for python-urllib3 source package in Disco

  • python-urllib3 (1.24.1-1ubuntu0.1) disco-security; urgency=medium
    
      * SECURITY UPDATE: CRLF injection issue
        - debian/patches/CVE-2019-11236-1.patch: check for control chars in URL
          in src/urllib3/connection.py, src/urllib3/connectionpool.py,
          src/urllib3/contrib/pyopenssl.py, src/urllib3/contrib/socks.py,
          src/urllib3/poolmanager.py, src/urllib3/response.py,
          src/urllib3/util/ssl_.py, src/urllib3/util/url.py,
          test/__init__.py, test/test_util.py,
          test/with_dummyserver/test_https.py,
          test/with_dummyserver/test_socketlevel.py.
        - debian/patches/CVE-2019-11236-2.patch: percent-encode invalid target
          characters in src/urllib3/util/url.py, test/test_util.py.
        - debian/patches/CVE-2019-11236-3.patch: don't use embedded python-six
          in src/urllib3/util/url.py.
        - CVE-2019-11236
      * SECURITY UPDATE: CA cert mishandling
        - debian/patches/CVE-2019-11324.patch: don't load system certificates
          by default when any other CA cert parameters are specified in
          src/urllib3/util/ssl_.py.
        - CVE-2019-11324
    
     -- Marc Deslauriers <email address hidden>  Mon, 13 May 2019 13:16:33 -0400
  • python-urllib3 (1.24.1-1) unstable; urgency=medium
    
      * Upload to unstable.
    
     -- Daniele Tricoli <email address hidden>  Mon, 11 Feb 2019 02:14:53 +0100
  • python-urllib3 (1.24-1) unstable; urgency=medium
    
      * Upload to unstable. (Closes: #911716)
    
     -- Daniele Tricoli <email address hidden>  Thu, 25 Oct 2018 05:01:14 +0200
  • python-urllib3 (1.22-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream release (Closes: #876334)
      * d/watch
        - Check upstream signature
        - Use https
      * Bump debhelper compat level to 11
      * Standards-Version is 4.1.3 now (no changes needed)
      * Add python{3,}-pytest to B-D
      * Use pytest for unit tests (same as upstream) and skip timing tests
      * Skip test_recent_date test
      * Use autopkgtest-pkg-python testsuite instead of hardcoded one
    
     -- Ondřej Nový <email address hidden>  Thu, 04 Jan 2018 15:09:14 +0100