--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-9664
2015-06-09 09:02:04
--------------------------------------------------------------------------------

Name        : python-urllib3
Product     : Fedora 21
Version     : 1.10.4
Release     : 3.20150503gita91975b.fc21
URL         : https://urllib3.readthedocs.io/en/stable/
Summary     : Python HTTP library with thread-safe connection pooling and file post
Description :
Python HTTP module with connection pooling and file POST abilities.

--------------------------------------------------------------------------------
Update Information:

Inject pyOpenSSL.  https://urllib3.readthedocs.io/en/latest/advanced-usage.html  https://urllib3.readthedocs.io/en/latest/advanced-usage.html
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jun  8 2015 Ralph Bean  - 1.10.4-3.20150503gita91975b
- Apply pyopenssl injection for an outdated cpython as per upstream advice
  https://urllib3.readthedocs.io/en/latest/advanced-usage.html
  https://urllib3.readthedocs.io/en/latest/advanced-usage.html
* Tue May 19 2015 Ralph Bean  - 1.10.4-2.20150503gita91975b
- Specify symlinks for six.py{c,o}, fixing rhbz #1222142.
* Sun May  3 2015 Ralph Bean  - 1.10.4-1.20150503gita91975b
- Latest release for python-requests-2.7.0
* Wed Apr 29 2015 Ralph Bean  - 1.10.3-2.20150429git585983a
- Grab a git snapshot to get around this chunked encoding failure.
* Wed Apr 22 2015 Ralph Bean  - 1.10.3-1
- new version
* Thu Feb 26 2015 Ralph Bean  - 1.10.2-1
- new version
* Wed Feb 18 2015 Ralph Bean  - 1.10.1-1
- new version
* Wed Feb 18 2015 Ralph Bean  - 1.10.1-1
- new version
* Mon Jan  5 2015 Ralph Bean  - 1.10-2
- Copy in a shim for ssl_match_hostname on python3.
* Sun Dec 14 2014 Ralph Bean  - 1.10-1
- Latest upstream 1.10, for python-requests-2.5.0.
- Re-do unbundling without patch, with symlinks.
- Modernize python2 macros.
- Remove the with_dummyserver tests which fail only sometimes.
* Wed Nov  5 2014 Ralph Bean  - 1.9.1-1
- Latest upstream, 1.9.1 for latest python-requests.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1222024 - InsecurePlatformWarning: A true SSLContext object is not available
        https://bugzilla.redhat.com/show_bug.cgi?id=1222024
  [ 2 ] Bug #1202077 - python-requests-2.6.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1202077
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update python-urllib3' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/

Fedora 21: python-urllib3 Security Update

June 18, 2015
Inject pyOpenSSL

Summary

Python HTTP module with connection pooling and file POST abilities.

Update Information:

Inject pyOpenSSL. https://urllib3.readthedocs.io/en/latest/advanced-usage.html https://urllib3.readthedocs.io/en/latest/advanced-usage.html

Change Log

* Mon Jun 8 2015 Ralph Bean - 1.10.4-3.20150503gita91975b - Apply pyopenssl injection for an outdated cpython as per upstream advice https://urllib3.readthedocs.io/en/latest/advanced-usage.html https://urllib3.readthedocs.io/en/latest/advanced-usage.html * Tue May 19 2015 Ralph Bean - 1.10.4-2.20150503gita91975b - Specify symlinks for six.py{c,o}, fixing rhbz #1222142. * Sun May 3 2015 Ralph Bean - 1.10.4-1.20150503gita91975b - Latest release for python-requests-2.7.0 * Wed Apr 29 2015 Ralph Bean - 1.10.3-2.20150429git585983a - Grab a git snapshot to get around this chunked encoding failure. * Wed Apr 22 2015 Ralph Bean - 1.10.3-1 - new version * Thu Feb 26 2015 Ralph Bean - 1.10.2-1 - new version * Wed Feb 18 2015 Ralph Bean - 1.10.1-1 - new version * Wed Feb 18 2015 Ralph Bean - 1.10.1-1 - new version * Mon Jan 5 2015 Ralph Bean - 1.10-2 - Copy in a shim for ssl_match_hostname on python3. * Sun Dec 14 2014 Ralph Bean - 1.10-1 - Latest upstream 1.10, for python-requests-2.5.0. - Re-do unbundling without patch, with symlinks. - Modernize python2 macros. - Remove the with_dummyserver tests which fail only sometimes. * Wed Nov 5 2014 Ralph Bean - 1.9.1-1 - Latest upstream, 1.9.1 for latest python-requests.

References

[ 1 ] Bug #1222024 - InsecurePlatformWarning: A true SSLContext object is not available https://bugzilla.redhat.com/show_bug.cgi?id=1222024 [ 2 ] Bug #1202077 - python-requests-2.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1202077

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-urllib3' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : python-urllib3
Product : Fedora 21
Version : 1.10.4
Release : 3.20150503gita91975b.fc21
URL : https://urllib3.readthedocs.io/en/stable/
Summary : Python HTTP library with thread-safe connection pooling and file post

Related News