- Add a couple of upstream patches to fix http process information
  disclosure (CVE-2024-41671, bsc#1228549) and XSS via html injection
  (CVE-2024-41810, bsc#1228552):
  * CVE-2024-41671.patch gh#twisted/twisted@4a930de12fb6
  * CVE-2024-41810.patch gh#twisted/twisted@046a164f89a0

• Files Changed
• Browse Source

- update to 24.3.0:
  * twisted.logger.formatEvent now honors dotted method names,
    not just flat function names, in format strings, as it has
    long been explicitly documented to do.  So, you will now get
    the expected result from formatEvent("here's the result of
    calling a method at log-format time: {obj.method()}",
    obj=...)
  * twisted.web.http.HTTPChannel now ignores the trailer headers
    provided in the last chunk of a chunked encoded response,
    rather than raising an exception.
  * twisted.protocols.tls.BufferingTLSTransport, used by default
    by twisted.protocols.tls.TLSMemoryBIOFactory, was refactored
    for improved performance when doing a high number of small
    writes.
  * twisted.python.failure.Failure now throws exception for
    generators without triggering a deprecation warnings on
    Python 3.12.
  * twisted.internet.process.Process, used by
    reactor.spawnProcess, now copies the parent environment when
    the env=None argument is passed on Posix systems and
    os.posix_spawnp is used internally.
  * twisted.internet.defer.inlineCallbacks.returnValue's stack
    introspection was adjusted for the latest PyPy 7.3.14
    release, allowing legacy @inlineCallbacks to run on new PyPY
    versions.
  * twisted.trial.reporter.TestRun.startTest() is no longer
    called for tests with skip annotation or skip attribute for
    Python 3.12.1 or newer. This is the result of upstream Python
    gh-106584 change. The behavior is not change in 3.12.0 or
    older.

• Files Changed
• Browse Source

- Add stop-using-3-arg-throw.patch:
  * Avoid 3-arg throw to fix a DeprecationWarning in Python 3.12.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588,
  CVE-2023-46137) serializing pipelined HTTP requests.

• Files Changed
• Browse Source

    + drops CVE-2022-39348-do-not-echo-host-header.patch in older dists

• Files Changed
• Browse Source

- add regenerate-cert-to-work-with-latest-service-identity.patch
  remove-pynacl-optional-dependency.patch: backports from main
  git to fix tests with newer dependency versions

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add patch support-new-glibc.patch:
  * Support new glibc changes.

• Files Changed
• Browse Source

- Add py311-tests-compat.patch to fix tests with python 3.11
  gh#twisted/twisted#11734
  gh#twisted/twisted#11733

• Files Changed
• Browse Source

- Skip rpmlint error python-tests-in-package.

• Files Changed
• Browse Source

- Update to 22.10.0:
  * Features
    + twisted.internet.defer.maybeDeferred will now schedule a coroutine
      result as asynchronous operation and return a Deferred that fires with
      the result of the coroutine.
    + Twisted now works with Cryptography versions 37 and above, and as a
      result, its minimum TLS protocol version has been upgraded to TLSv1.2.
    + The systemd: endpoint parser now supports "named" file descriptors. This
      is a more reliable mechanism for choosing among several inherited
      descriptors.
  * Bugfixes
    + twisted.internet.base.DelayedCall.__repr__ will no longer raise
      AttributeError if the DelayedCall was created before debug mode was
      enabled. As a side-effect, twisted.internet.base.DelayedCall.creator is
      now defined as None in cases where previously it was undefined.
    + twisted.internet.iocpreactor.udp now properly re-queues its listener
      when there is a failure condition on the read from the socket.
    + twisted.internet.defer.inlineCallbacks no longer causes confusing
      StopIteration tracebacks to be added to the top of tracebacks
      originating in triggered callbacks.
    + The typing of twisted.internet.task.react no longer constrains the
      type of argv.
    + ContextVar.reset() now works correctly inside inlineCallbacks functions
      and coroutines.
    + Implement twisted.python.failure._Code.co_positions for compatibility
      with Python 3.11.
    + twisted.pair.tuntap._TUNSETIFF and ._TUNGETIFF values are now correct
      parisc, powerpc and sparc architectures. 
    + twisted.web.vhost.NameVirtualHost will no longerreturn a NoResource
      error. (bsc#1204781, CVE-2022-39348)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Synchronize changelog with the SLE package.

• Files Changed
• Browse Source

- Update to 22.2.0:
  * Bugfixes
    + twisted.internet.gireactor.PortableGIReactor.simulate and
      twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer
      raises TypeError when there are no delayed called. This was a
      regression introduced with the migration to Python 3 in which the
      builtin min function no longer accepts None as an argument. (#9660)
    + twisted.conch.ssh.transport.SSHTransportBase now disconnects the
      remote peer if the SSH version string is not sent in the first
      4096 bytes. (#10284, CVE-2022-21716, GHSA-rv6r-3f5q-9rgx)
  * Improved Documentation
    + Add type annotations for twisted.web.http.Request.getHeader. (#10270)
  * Deprecations and Removals
    + Support for Python 3.6, which is EoL as of 2021-09-04, has been
      deprecated. (#10303)
- Add patch CVE-2022-24801-http-1.1-leniency.patch:
  * Be stricter about HTTP/1.1 headers. (bsc#1198086)

• Files Changed
• Browse Source

- Add patch skip-namespacewithwhitespace.patch:
  * Skip a failing test with Expat 2.4.5.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add patch currentThread-deprecated.patch:
  * Do not call a deprecated method which causes reactor startup to abort.

• Files Changed
• Browse Source