Skip to content

Commit

Permalink
py-waitress: updated to 3.0.2
Browse files Browse the repository at this point in the history
3.0.2 (2024-11-16)

Security

- When using Waitress to process trusted proxy headers, Waitress will now
  update the headers to drop any untrusted values, thereby making sure that
  WSGI apps only get trusted and validated values that Waitress itself used to
  update the environ. See Pylons/waitress#452 and
  Pylons/waitress#451


3.0.1 (2024-10-28)

Backward Incompatibilities

- Python 3.8 is no longer supported.
  See Pylons/waitress#445.

Features

- Added support for Python 3.13.
  See Pylons/waitress#445.

Security

- Fix a bug that would lead to Waitress busy looping on select() on a half-open
  socket due to a race condition that existed when creating a new HTTPChannel.
  See Pylons/waitress#435,
  Pylons/waitress#418 and
  GHSA-3f84-rpwh-47g6

  With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and
  helping track this down.

- No longer strip the header values before passing them to the WSGI environ.
  See Pylons/waitress#434 and
  Pylons/waitress#432

- Fix a race condition in Waitress when `channel_request_lookahead` is enabled
  that could lead to HTTP request smuggling.
  • Loading branch information
adam committed Feb 5, 2025
1 parent 0a38636 commit c70cb4a
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 8 deletions.
6 changes: 2 additions & 4 deletions www/py-waitress/Makefile
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# $NetBSD: Makefile,v 1.16 2024/11/11 07:29:29 wiz Exp $
# $NetBSD: Makefile,v 1.17 2025/02/05 13:28:15 adam Exp $

DISTNAME= waitress-3.0.0
DISTNAME= waitress-3.0.2
PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
CATEGORIES= www python
MASTER_SITES= ${MASTER_SITE_PYPI:=w/waitress/}
Expand All @@ -15,8 +15,6 @@ TEST_DEPENDS+= ${PYPKGPREFIX}-test-cov-[0-9]*:../../devel/py-test-cov

USE_LANGUAGES= # none

PYTHON_VERSIONS_INCOMPATIBLE= 27

post-install:
cd ${DESTDIR}${PREFIX}/bin && \
${MV} waitress-serve waitress-serve-${PYVERSSUFFIX} || ${TRUE}
Expand Down
8 changes: 4 additions & 4 deletions www/py-waitress/distinfo
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
$NetBSD: distinfo,v 1.13 2024/06/13 07:33:57 adam Exp $
$NetBSD: distinfo,v 1.14 2025/02/05 13:28:15 adam Exp $

BLAKE2s (waitress-3.0.0.tar.gz) = 3c87a9bf10836977cedf674887057649f8c29fa6f8258d2bb93cda26c083fc07
SHA512 (waitress-3.0.0.tar.gz) = 8b391eb194fce32fd78c1a20cd1afe8caf20e7e0c622e4be2b1ec7d3831cb5a607cda0637d08dcd3a55f2e8c84817abdad4636bf2ca260b12a774dcfa68b9176
Size (waitress-3.0.0.tar.gz) = 179393 bytes
BLAKE2s (waitress-3.0.2.tar.gz) = bf2081492941990a2b37ccd808ada1c28b847571aa1904094eb193c43821e219
SHA512 (waitress-3.0.2.tar.gz) = f225447b936e4742cf6f0e45b72cc2e33c06ff609c9896fc226de23b9c7ba64140914e3525f57c901617c0a49df3052fe5acbd8ec46f9557832c383ab9d4a483
Size (waitress-3.0.2.tar.gz) = 179901 bytes

0 comments on commit c70cb4a

Please sign in to comment.