A vulnerability in corydolphin/flask-cors version 4.0.1 allows the
`Access-Control-Allow-Private-Network` CORS header to be set to true
by default, without any configuration option. This behavior can expose
private network resources to unauthorized external access, leading to
significant security risks such as data breaches, unauthorized access
to sensitive information, and potential network intrusions.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6221
Upsteam-Patch:
7ae310c56a
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Update incorrect or incomplete constants in distutils
- Use Generator instead of Iterator for 3rd-party context managers
- Bump mypy to 1.11.1
License-Update:
License changed from "Apache-2.0 license" to "Apache-2.0"
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- An inconsistency in Float/Rational comparisons was fixed. SymPy 1.13 made it
so that Rational(n) != Float(n) but this was inconsistent in the case of
Rational(0) == Float(0) and Float(0) == Rational(0) which gave different
results.
- Fixed a bug that caused LambertW to hang on specific inputs.
- A regression introduced in SymPy 1.13 in the heurisch integration routine was
fixed. The regression prevented some integrals from being evaluated.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Updated test & build matrix to include Python 3.13.
- Dropped wheel support for Python 2.7 on macOS.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* Properly preserve escaped '{' and '}' in fstrings in logical lines in 3.12+.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Fix a 64-bit-ism in the test suite so the tests don't encounter a false
negative on 32-bit systems.
- Modify a test-harness skiptest check to work with newer versions of
Cryptography.
- Massage our import of the TripleDES cipher to support Cryptography >=43;
this should prevent CryptographyDeprecationWarning from appearing upon import.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Add many Meta option to Schema so it expects a collection by default
- Refactor hooks
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
- Deferred import of inspect for import performance.
- Disallow passing of 'dist' to EntryPoints.select.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- minor docs fixes
- worker_class parameter accepts a class
- fix deadlock if request terminated during chunked parsing
- permit receiving Transfer-Encodings: compress, deflate, gzip
- permit Transfer-Encoding headers specifying multiple encodings. note: no parameters, still
- sdist generation now explicitly excludes sphinx build folder
- decode bytes-typed status (as can be passed by gevent) as utf-8 instead of raising TypeError
- raise correct Exception when encounting invalid chunked requests
- the SCRIPT_NAME and PATH_INFO headers, when received from allowed forwarders, are no longer restricted for containing an underscore
- include IPv6 loopback address [::1] in default for forwarded_allow_ips and proxy_allow_ips
- refuse requests where the uri field is empty
- refuse requests with invalid CR/LR/NUL in heade field values
- remove temporary --tolerate-dangerous-framing switch from 22.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Chaneglog:
============
- Run mypy locally via pre-commit hook, bump to mypy==1.10.0
- Updates to the latest eth-typing to use new ABI types for improved type
checking in existing ABI utility functions.
- Contract Application Binary Interface (ABI) utilities to obtain type and
value information for functions and events.
- Merge template to use bump-my-version and update release Make commands.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
Use dbus-run-session to drop X11 dependency
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
- Fixed :meth:aiohttp.ClientResponse.json() not setting status
when :exc:aiohttp.ContentTypeError is raised
- Improved performance of the WebSocket reader
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- Add support for python 3.13
- Fix a trivial typo in readme.md
- Correct classifier for license python-2.0.1
- Adjust license to python-2.0.1
- Remove upper bound on python requirement
- Preserve errno if all exceptions have the same errno
- Adjust license classifier to better reflect license terms
- Add link to happy eyeballs explanation
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Change the reference to the MIT license containing LICENSE file in the
downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Change the reference to the MIT license containing LICENSE file in the
downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Change the reference to the MIT license containing COPYING file in the
downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Change the reference to the MIT license containing LICENSE file in the
downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Change the reference to the Apache-2.0 license containing LICENSE file
in the downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Apply some changes to recipe content ordering and indentation style
from oe-stylize.py.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Apply suggestions to recipe content ordering and indentation style from
oe-stylize.py and also remove the duplicate DEPENDS line for
python3-setuptools-scm-native.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Both project pypi page: https://pypi.org/project/cbor2/ as well as
https://github.com/agronholm/cbor2/blob/5.6.4/LICENSE.txt state that it
is subject to MIT rather than Apache-2.0 license. Also update
LIC_FILES_CHKSUM value to reference the LICENSE.txt file from the
downloaded archive.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
_mask.c is generated by cython and encodes sourcepaths into
comments which are absolute. Edit them out.
Fixes buildpaths QA errors
Signed-off-by: Khem Raj <raj.khem@gmail.com>
