File: changelog

package info (click to toggle)
python-aiohttp 3.11.15-1
  • links: PTS, VCS
  • area: main
  • in suites: sid, trixie
  • size: 16,160 kB
  • sloc: python: 51,888; ansic: 20,843; makefile: 395; javascript: 31; sh: 3
file content (457 lines) | stat: -rw-r--r-- 14,298 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
python-aiohttp (3.11.15-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * Now requires a newer version of yarl.
  * Update patches.
  * Update Standards-Version.

 -- Edward Betts <edward@4angle.com>  Tue, 01 Apr 2025 11:18:04 +0100

python-aiohttp (3.10.11-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - CVE-2024-52303: Fix system routes polluting the middleware cache
      (closes: #1088108).
    - CVE-2024-52304: Fix incorrect parsing of chunk extensions with the
      pure Python parser (closes: #1088109).

 -- Colin Watson <cjwatson@debian.org>  Mon, 30 Dec 2024 00:23:32 +0000

python-aiohttp (3.10.10-2) unstable; urgency=medium

  * Team upload.
  * (Build-)depend on python3-yarl (>= 1.12.0) (closes: #1086658).

 -- Colin Watson <cjwatson@debian.org>  Wed, 13 Nov 2024 14:31:21 +0000

python-aiohttp (3.10.10-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 29 Oct 2024 12:17:05 +0100

python-aiohttp (3.10.8-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 01 Oct 2024 16:05:56 +0200

python-aiohttp (3.10.6-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 27 Sep 2024 16:27:09 +0200

python-aiohttp (3.10.5-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 24 Aug 2024 09:30:57 +0200

python-aiohttp (3.10.4-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Mon, 19 Aug 2024 11:36:35 +0100

python-aiohttp (3.10.3-3) unstable; urgency=medium

  * Team upload.
  * Use local Sphinx inventories where available; ignore other missing
    references.

 -- Colin Watson <cjwatson@debian.org>  Sun, 18 Aug 2024 13:50:33 +0100

python-aiohttp (3.10.3-2) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Colin Watson <cjwatson@debian.org>  Thu, 15 Aug 2024 16:45:04 +0100

python-aiohttp (3.10.3-1) experimental; urgency=medium

  * Rework build to avoid needing to filter out *.egg-info from upstream.
  * Fix documentation build.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Wed, 14 Aug 2024 18:19:39 +0100

python-aiohttp (3.10.1-1) experimental; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Mon, 05 Aug 2024 15:14:44 +0100

python-aiohttp (3.10.0-1) experimental; urgency=medium

  * Team upload.
  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Sun, 04 Aug 2024 19:05:16 +0100

python-aiohttp (3.9.5-1) unstable; urgency=medium

  * Team upload.
  * Use pybuild-plugin-pyproject.
  * New upstream release:
    - CVE-2024-23829: Python HTTP parser still overly lenient about
      separators (closes: #1062708).
    - CVE-2024-23334: aiohttp.web.static(follow_symlinks=True) is vulnerable
      to directory traversal (closes: #1062709).
    - CVE-2024-30251: DoS when trying to parse malformed POST requests
      (closes: #1070364).
    - CVE-2024-27306: XSS on index pages for static file handling (closes:
      #1070665).
  * Standards-Version: 3.7.0 (no changes required).

 -- Colin Watson <cjwatson@debian.org>  Sun, 16 Jun 2024 12:39:52 +0100

python-aiohttp (3.9.1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 3.9.1
    - CVE-2023-49081 (aiohttp's ClientSession is vulnerable to CRLF
      injection via version) (Closes: #1057163)
    - CVE-2023-49082 (aiohttp's ClientSession is vulnerable to CRLF
      injection via method) (Closes: #1057164)
    - Fix ftbfs on python3.12 (Closes: #1056036)
  * Update debian/patches
  * Update debian/copyright
  * Clean built docs (Closes: #1047256)

 -- Bo YU <tsu.yubo@gmail.com>  Wed, 13 Dec 2023 10:32:49 +0800

python-aiohttp (3.8.6-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 14 Oct 2023 13:12:38 +0200

python-aiohttp (3.8.5-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sun, 20 Aug 2023 14:19:30 +0200

python-aiohttp (3.8.4-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Update standards version to 4.6.2, no changes needed.

  [ Piotr Ożarowski ]
  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Thu, 16 Feb 2023 11:54:52 +0100

python-aiohttp (3.8.3-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Mon, 31 Oct 2022 09:58:46 +0100

python-aiohttp (3.8.1-5) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster (oldstable):
    + Build-Depends: Drop versioned constraint on python3-all-dev and
      python3-yarl.
    + python3-aiohttp: Drop versioned constraint on python3-yarl in Depends.

 -- Jelmer Vernooij <jelmer@debian.org>  Fri, 14 Oct 2022 11:57:30 +0100

python-aiohttp (3.8.1-4) unstable; urgency=high

  * Team upload.
  * debian/control: Add versioned dependency (Closes: #1001642):
    + python3-async-timeout (>= 4.0.1)
  * debian/py3dist-overrides: Add "idna_ssl python3-idna-ssl" line
    to suppress build error raised by newer dh_python3.

 -- Boyuan Yang <byang@debian.org>  Sun, 19 Dec 2021 01:05:53 -0500

python-aiohttp (3.8.1-3) unstable; urgency=medium

  * Add python3-charset-normalizer to (Build-)Depends (closes: 1000848)

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 30 Nov 2021 13:58:24 +0100

python-aiohttp (3.8.1-2) unstable; urgency=medium

  * New upstream release (closes: 1000680)
  * docs: temporarily remove news (sphinxcontrib.towncrier is not yet packaged)

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 27 Nov 2021 17:20:40 +0100

python-aiohttp (3.7.4-2) unstable; urgency=medium

  * Team upload.

  [ Diego M. Rodriguez ]
  * d/control: add sphinx dependencies to doc package (Closes: #990652)

  [ Debian Janitor ]
  * Apply multi-arch hints.
    + python-aiohttp-doc: Add Multi-Arch: foreign.
  * Bump debhelper from old 12 to 13.

  [ Boyuan Yang ]
  * debian/: Drop manual -dbg package. (Closes: #994345)
  * debian/control: Bump Standards-Version to 4.6.0.

 -- Boyuan Yang <byang@debian.org>  Tue, 16 Nov 2021 12:03:24 -0500

python-aiohttp (3.7.4-1) unstable; urgency=high

  * Team upload
  * New upstream version 3.7.4
  * Fixes only an openredirect issue in normalize_path_middleware middleware
    (CVE-2021-21330) and is thus suitable for bullseye.

 -- Raphaël Hertzog <hertzog@debian.org>  Fri, 26 Feb 2021 09:39:16 +0100

python-aiohttp (3.7.3-2) unstable; urgency=medium

  * No change rebuild.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 26 Feb 2021 09:11:31 +0100

python-aiohttp (3.7.3-1) unstable; urgency=medium

  [ Emmanuel Arias ]
  * Add python-aiohttp-doc package (Closes: #950331)
    - Add d/python-aiohttp-doc* files.
    - d/rules: add override_dh_auto_build for build documentation.
    - d/control: add python3-sphinxcontrib.blockdiag depends for build
      documentation.

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Debian Janitor ]
  * Set field Upstream-Name in debian/copyright.
  * Remove obsolete field Name from debian/upstream/metadata (already present in
    machine-readable debian/copyright).

  [ Piotr Ożarowski ]
  * New upstream release
  * Patch documentation to remove "fork me on Github" button (privacy breach)
  * Standards-Version bumped to 4.5.1 (no changes needed)
  * Update debian/copyright to mention vendor/http-parser files

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 15 Jan 2021 20:52:09 +0100

python-aiohttp (3.6.2-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Bump Standards-Version to 4.4.1.

  [ William Grzybowski ]
  * New upstream release
  * d/control:
    - Add Rules-Requires-Root: no
    - Add sphinxdoc to package Depends
    - Update Standards-Version to 4.4.1
  * d/patches: add patch 0002 to add shebang to examples

 -- William Grzybowski <william@grzy.org>  Wed, 23 Oct 2019 09:51:01 -0300

python-aiohttp (3.6.1-1) unstable; urgency=medium

  * New upstream release

 -- William Grzybowski <william@grzy.org>  Mon, 23 Sep 2019 16:51:58 -0300

python-aiohttp (3.6.0-1) unstable; urgency=medium

  * New upstream release
  * d/watch: use version 4 and ignore alpha/beta/rc

 -- William Grzybowski <william@grzy.org>  Tue, 17 Sep 2019 14:38:53 -0300

python-aiohttp (3.5.4-1) unstable; urgency=medium

  [ William Grzybowski ]
  * New upstream version 3.5.4
  * Add debian/salsa-ci.yml
  * d/control: add myself to Uploaders
  * d/control: update debhelper to version 12
  * d/copyright: adjust upstream years and remove debian/idna_ssl.py
  * d/python3-aiohttp.pyremove: also remove *.pxd and *.pxi
  * d/rules: run dwz only in the debug package
  * Remove header files using pyremove and not rules

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.0.
  * d/control: Remove ancient X-Python3-Version field.

 -- William Grzybowski <william@grzy.org>  Fri, 26 Jul 2019 16:17:15 -0300

python-aiohttp (3.5.1-1) unstable; urgency=medium

  * New upstream release
  * Remove idna_ssl patch - no longer needed in Python >= 3.7
  * Standards-Version bumped to 4.3.0 (no changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Mon, 31 Dec 2018 18:15:56 +0100

python-aiohttp (3.4.4-1~exp1) experimental; urgency=medium

  * Team upload
  * New upstream release (Closes: #901010)
  * debian/control:
    - New standards version 4.2.1 - no changes
    - Recommends libjs-jquery
  * debian/gbp.conf: Enable pristine-tar build
  * debian/patches:
    - Refresh patches
    - debian/patches/0002-Use-local-install-of-jquery.patch
      (fixes lintian)
  * debian/rules:
    - Do not delete aiohttp/_*.c in override_dh_auto_clean
    - Delete _find_header.h from binary packages

 -- Ruben Undheim <ruben.undheim@gmail.com>  Fri, 21 Dec 2018 18:32:14 +0000

python-aiohttp (3.1.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * d/copyright: Fix Format URL to correct one
  * d/rules: Remove trailing whitespaces
  * Bump debhelper compat level to 11
  * Standards-Version is 4.2.0 now (no changes needed)
  * Enable autopkgtest-pkg-python testsuite
  * Install examples
  * Really bump required Python 3 version to 3.5.3
  * Enable all hardening
  * Add upstream metadata
  * d/copyright: Change Source to new location
  * Convert git repository from git-dpm to gbp layout
  * Require python3-yarl at least 1.0 (Closes: #897432)

 -- Ondřej Nový <onovy@debian.org>  Tue, 14 Aug 2018 14:53:26 +0200

python-aiohttp (3.0.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org

  [ Piotr Ożarowski ]
  * New upstream release
    - minimum required Python 3 version bumped to 3.5.3
  * bundle idna_ssl module until Python 3.7 is the one supported in Debian

 -- Piotr Ożarowski <piotr@debian.org>  Wed, 14 Feb 2018 12:59:09 +0100

python-aiohttp (2.3.6-1) unstable; urgency=medium

  * New upstream release
  * Standards-Version bumped to 4.1.2 (d/copyright format URL switch to HTTPS)

 -- Piotr Ożarowski <piotr@debian.org>  Wed, 20 Dec 2017 12:01:51 +0100

python-aiohttp (2.2.3-2) unstable; urgency=medium

  * Team upload.
  * d/rules: clean generated C files. Closes: #880352.
  * d/control: bump Standards-Version to 4.1.1.
  * d/watch: switch to HTTPS.

 -- Vincent Bernat <bernat@debian.org>  Sun, 26 Nov 2017 19:06:47 +0100

python-aiohttp (2.2.3-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Sun, 09 Jul 2017 22:53:16 +0200

python-aiohttp (2.2.0-1) unstable; urgency=medium

  * New upstream release
  * Standards-Version bumped to 4.0.0 (no changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 23 Jun 2017 19:50:46 +0200

python-aiohttp (1.2.0-1) unstable; urgency=medium

  * New upstream release
  * debian/compat changed to 10 (this change also closes: 845178 thanks to
    dh_autoreconf)

 -- Piotr Ożarowski <piotr@debian.org>  Wed, 21 Dec 2016 13:30:27 +0100

python-aiohttp (1.1.5-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 18 Nov 2016 19:58:04 +0100

python-aiohttp (1.1.2-1) unstable; urgency=medium

  * New upstream release
    - works with new multidict (closes: 835299)
    - decompresses HTTP bodies (closes: 833254)
  * tests disabled for now (see comment in debian/rules)
    closes: 830567, 839478

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 08 Nov 2016 22:58:56 +0100

python-aiohttp (0.22.4-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Fixed VCS URL (https)

  [ Piotr Ożarowski ]
  * New upstream release
    - Add dependency on python3-multidict
  * Backport changes in test/test_connector.py from upstream master branch
  * Standards-Version bumped to 3.9.8 (no changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Thu, 28 Jul 2016 23:32:19 +0200

python-aiohttp (0.20.2-1) unstable; urgency=medium

  * New upstream release.
  * Replace python3-nose with python3-pytest in Build-Depends
    and remove override_dh_auto_test from debian/rules;
    remove no longer needed override_dh_auto_test in debian/rules
  * Remove .cache directory in clean target

 -- Piotr Ożarowski <piotr@debian.org>  Thu, 28 Jan 2016 21:42:23 +0100

python-aiohttp (0.17.4-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 29 Sep 2015 23:12:42 +0200

python-aiohttp (0.17.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * d/patches/no-gunicorn.patch: Deleted; we have python3-gunicorn now.
  * d/control: Add python3-gunicorn to Build-Depends.
  * d/rules: override_dh_auto_test until pybuild bug #749506 is fixed.

 -- Barry Warsaw <barry@debian.org>  Thu, 13 Aug 2015 16:12:29 -0400

python-aiohttp (0.15.3-1) unstable; urgency=medium

  * Update to 0.15.3 upstream release.

 -- Tianon Gravi <admwiggin@gmail.com>  Sun, 03 May 2015 06:44:18 +0000

python-aiohttp (0.15.1-1) unstable; urgency=medium

  * Initial release.

 -- Tianon Gravi <admwiggin@gmail.com>  Sat, 04 Apr 2015 09:07:00 -0600