Commit Graph

7 Commits

Author SHA1 Message Date
Soumya Sambu
5c4b61d38a python3-twisted: Fix CVE-2024-41671
Twisted is an event-based framework for internet applications, supporting Python 3.6+.
The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP
requests out-of-order, possibly resulting in information disclosure. This vulnerability
is fixed in 24.7.0rc1.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-41671
https://ubuntu.com/security/CVE-2024-41671

Upstream patches:
f1cb4e616e
ef2c755e9e

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-05-25 14:48:44 -04:00
Hains van den Bosch
5a6f7925bd python3-twisted: Add python3-typing-extensions to RDEPENDS
To fix crash due to missing module:

File "/usr/lib/python3.11/site-packages/twisted/internet/defer.py", line 42, in <module>
from typing_extensions import Literal, ParamSpec, Protocol
ModuleNotFoundError: No module named 'typing_extensions'

Signed-off-by: Hains van den Bosch <hainsvdbosch@ziggo.nl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-04-28 13:10:23 -04:00
Hains van den Bosch
8d40d6e3b9 python3-twisted: Add python3-asyncio to RDEPENDS
To fix crash due to missing module:

from twisted.internet import defer
File "/usr/lib/python3.11/site-packages/twisted/internet/defer.py", line 14, in <module>
from asyncio import AbstractEventLoop, Future, iscoroutine
ModuleNotFoundError: No module named 'asyncio'

Signed-off-by: Hains van den Bosch <hainsvdbosch@ziggo.nl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Guðni Már Gilbert <gudnimar@noxmedical.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-04-28 13:10:23 -04:00
Ross Burton
7f27771b28 Update for setuptools_build_meta renamed to python_setuptools_build_meta
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-19 19:00:34 -07:00
Ross Burton
ff7312f048 meta-python: migrate away from setuptool3 where possible
Many recipes are currently building with setuptools3 but can use a more
modern tool: typically setuptools_build_meta but ordered-set can use
flit_core and pyrad can use poetry_core.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2022-03-11 08:48:38 -05:00
Ross Burton
ce5e0278cf python3-twisted: remove empty PN-src and PN-dbg
Nothing is packaged in these, there are no debug symbols and the sources
are packaged into the regular packages.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2022-03-11 08:48:38 -05:00
Wang Mingyu
91f74f01a0 python3-twisted: upgrade 22.1.0 -> 22.2.0
Changelog:
=========
Bugfixes
--------
- twisted.internet.gireactor.PortableGIReactor.simulate and
  twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer raises
  TypeError when there are no delayed called. This was a regression introduced
  with the migration to Python 3 in which the builtin 'min' function no longer
  accepts 'None' as an argument. (#9660)
- twisted.conch.ssh.transport.SSHTransportBase now disconnects the remote peer
  if the SSH version string is not sent in the first 4096 bytes.
  (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)

Improved Documentation
----------------------
- Add type annotations for twisted.web.http.Request.getHeader. (#10270)

Deprecations and Removals
-------------------------
- Support for Python 3.6, which is EoL as of 2021-09-04, has been deprecated. (#10303)

Bugfixes
--------
- _dist.test.test_workertrial now correctly compare strings via assertEqual() and pass on PyPy3 (#10302)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2022-03-09 07:37:04 -08:00