Change log for waitress package in Ubuntu

waitress (2.1.2-2) unstable; urgency=medium

  * Team Upload.
  * autopkgtest: Update control file for successful testing

 -- Carsten Schoenert <email address hidden>  Mon, 14 Nov 2022 17:15:51 +0100

Available diffs

• diff from 2.1.1-2ubuntu1 (in Ubuntu) to 2.1.2-2 (11.1 KiB)

waitress (2.1.1-2ubuntu1) kinetic; urgency=medium

  * SECURITY UPDATE: exception via WSGI thread closing socket
    - debian/patches/CVE-2022-31015.patch: only close socket in the main
      thread in src/waitress/channel.py, src/waitress/wasyncore.py,
      tests/test_channel.py.
    - CVE-2022-31015

 -- Marc Deslauriers <email address hidden>  Thu, 11 Aug 2022 11:03:49 -0400

Available diffs

• diff from 2.1.1-2 (in Debian) to 2.1.1-2ubuntu1 (2.2 KiB)

waitress (2.1.1-2) unstable; urgency=medium

  * Team upload.
  * Build-Depend and autopkgtest Depend on netbase, for services resolution in
    tests.

 -- Stefano Rivera <email address hidden>  Tue, 10 May 2022 08:31:41 -0400

Available diffs

• diff from 1.4.4-1.1ubuntu1 (in Ubuntu) to 2.1.1-2 (61.6 KiB)

waitress (1.4.4-1.1ubuntu1) jammy; urgency=medium

  * SECURITY UPDATE: Request smuggle
    - debian/patches/CVE-2022-24761-*: Fix for HTTP request smuggling due
      to incorrect validation in src/waitress/parser.py,
      src/waitress/receiver.py, src/waitress/rfc7230.py,
      src/waitress/utilities.py, test/test_functional.py,
      test/test_parser.py, test/test_receiver.py.
    - CVE-2022-24761

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 29 Mar 2022 11:13:55 -0300

Available diffs

• diff from 1.4.4-1.1 (in Debian) to 1.4.4-1.1ubuntu1 (6.3 KiB)

waitress (1.4.1-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Request smuggle
    - debian/patches/CVE-2022-24761-*: Fix for HTTP request smuggling due
      to incorrect validation in src/waitress/parser.py,
      src/waitress/receiver.py, src/waitress/rfc7230.py,
      src/waitress/utilities.py, test/test_functional.py,
      test/test_parser.py, test/test_receiver.py.
    - CVE-2022-24761
  * Fixing tests issues
    - debian/patches/fixing_tests.patch: fix compatibility issues in tests
      test/test_functional.py, test/test_receiver.py.

 -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 31 Mar 2022 15:56:43 -0300

Available diffs

• diff from 1.4.1-1 (in Debian) to 1.4.1-1ubuntu0.1 (6.6 KiB)

waitress (1.4.4-1.1ubuntu0.1) impish-security; urgency=medium

  * SECURITY UPDATE: Request smuggle
    - debian/patches/CVE-2022-24761-*: Fix for HTTP request smuggling due
      to incorrect validation in src/waitress/parser.py,
      src/waitress/receiver.py, src/waitress/rfc7230.py,
      src/waitress/utilities.py, test/test_functional.py,
      test/test_parser.py, test/test_receiver.py.
    - CVE-2022-24761
  * Fixing tests issues
    - debian/patches/fixing_tests.patch: fix compatibility issues in tests
      test/test_functional.py, test/test_receiver.py.

 -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 31 Mar 2022 14:06:19 -0300

Available diffs

• diff from 1.4.4-1.1 (in Debian) to 1.4.4-1.1ubuntu0.1 (6.9 KiB)

waitress (1.4.4-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix cleanup of the waitress-serve alternative.  (Closes: #984630)

 -- Andreas Beckmann <email address hidden>  Tue, 20 Apr 2021 20:58:53 +0200

Available diffs

• diff from 1.4.4-1 to 1.4.4-1.1 (450 bytes)

waitress (1.4.4-1) unstable; urgency=medium

  [ Andrej Shadura ]
  * New upstream release.

  [ Michael Fladischer ]
  * Provide virtual package httpd-wsgi3.

  [ Debian Janitor ]
  * Replace spaces in short license names with dashes.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.5.0, no changes needed.
  * Apply multi-arch hints.
    + python-waitress-doc: Add Multi-Arch: foreign.

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

 -- Andrej Shadura <email address hidden>  Sat, 09 Jan 2021 10:16:20 +0100

Available diffs

• diff from 1.4.1-1 to 1.4.4-1 (182.7 KiB)

waitress (1.4.1-1) unstable; urgency=medium

  * New upstream release.
    - Closes: #947306:
      CVE-2019-16785: potential HTTP request smuggling/splitting
      due to differences in endline parsing.
      CVE-2019-16786: incorrect treatment of single requests as
      multiple requests in the case of HTTP pipelining due to
      the incorrect parsing of Transfer-Encoding ignoring all but
      the first comma-separated header value.
    - Closes: #947433:
      CVE-2019-16789: potential HTTP request splitting leading
      to potential cache poisoning or unexpected information
      disclosure due to incorrect parsing of special whitespace
      characters in the Transfer-Encoding header.
  * Refresh the documentation configuration patch.
  * Set Rules-Requires-Root: no
  * Bump Standards-Version to 4.4.1, no changes.
  * Replace dh_auto_install override with --shebang.
  * Update debian/copyright.
  * Use ${sphinxdoc:Built-Using}.

 -- Andrej Shadura <email address hidden>  Wed, 01 Jan 2020 14:04:40 +0100

Available diffs

• diff from 1.3.1-4 to 1.4.1-1 (90.5 KiB)

waitress (1.3.1-4) unstable; urgency=medium

  * Revert the documentation package rename.
  * Revert the reversion of the Python 3 removal.
  * Remove alternatives on preinst.
  * Install waitress-serve into /usr/bin directly.

 -- Andrej Shadura <email address hidden>  Thu, 12 Sep 2019 21:38:15 +0200

Available diffs

• diff from 1.2.0~b2-2 to 1.3.1-4 (33.3 KiB)

waitress (1.2.0~b2-2) unstable; urgency=medium

  * Unbreak docco build (Closes: #918669).

 -- Andrej Shadura <email address hidden>  Tue, 08 Jan 2019 15:54:08 +0100

Available diffs

• diff from 1.1.0-1 to 1.2.0~b2-2 (58.3 KiB)
• diff from 1.2.0~b2-1 to 1.2.0~b2-2 (642 bytes)

waitress (1.2.0~b2-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/copyright: Use https protocol in Format field.
  * d/control: Add Vcs-* field.

  [ Andrej Shadura ]
  * New upstream release.

 -- Andrej Shadura <email address hidden>  Mon, 07 Jan 2019 18:26:54 +0100

waitress (1.1.0-1) unstable; urgency=medium

  * New upstream release.
  * Enable autopkgtests.
  * Add Vcs-*.

 -- Andrej Shadura <email address hidden>  Sun, 13 May 2018 10:12:31 +0200

Available diffs

• diff from 1.0.1-1 to 1.1.0-1 (4.8 KiB)

waitress (1.0.1-1) unstable; urgency=medium

  * New upstream release.
  * Update package descriptions.
  * Build-Depend on Python 2.7+/3.3+.

 -- Andrew Shadura <email address hidden>  Tue, 13 Dec 2016 14:34:36 +0100

Available diffs

• diff from 0.8.10-1 to 1.0.1-1 (20.7 KiB)

waitress (0.8.10-1) unstable; urgency=medium

  [ Juan Picca ]
  * Make the build reproducible (Closes: #788597).

  [ Andrew Shadura ]
  * New upstream release.

 -- Andrew Shadura <email address hidden>  Sat, 26 Dec 2015 14:44:28 +0100

Available diffs

• diff from 0.8.9-2ubuntu1 (in Ubuntu) to 0.8.10-1 (9.1 KiB)

waitress (0.8.9-2ubuntu1) wily; urgency=medium

  * debian/patches/fix-python35.patch: Fixes regression with python 3.5.

 -- Chuck Short <email address hidden>  Thu, 30 Jul 2015 08:36:49 -0400

Available diffs

• diff from 0.8.9-2 (in Debian) to 0.8.9-2ubuntu1 (697 bytes)

waitress (0.8.9-2) unstable; urgency=medium


  * Fix FTBFS (Closes: #765126).

 -- Andrew Shadura <email address hidden>  Mon, 13 Oct 2014 21:56:21 +0200

Available diffs

• diff from 0.8.8-3 to 0.8.9-2 (7.7 KiB)

waitress (0.8.8-3) unstable; urgency=low


  * Build against python3.4.
  * Fix shebangs in waitress-serve scripts.

 -- Andrew Shadura <email address hidden>  Thu, 24 Apr 2014 08:12:29 +0200

Available diffs

• diff from 0.8.8-1ubuntu3 (in Ubuntu) to 0.8.8-3 (1.5 KiB)

waitress (0.8.8-1ubuntu3) trusty; urgency=medium

  * Drop XS-Testsuite header too, as autopkgtest was dropped.
 -- Martin Pitt <email address hidden>   Tue, 07 Jan 2014 15:42:50 +0100

Available diffs

• diff from 0.8.7-2ubuntu4 to 0.8.8-1ubuntu3 (8.2 KiB)
• diff from 0.8.8-1ubuntu2 to 0.8.8-1ubuntu3 (499 bytes)

waitress (0.8.8-1ubuntu2) trusty; urgency=medium

  * d/control,rules: Enable test suite execution during package build.
  * d/tests/*: Drop DEP-8 tests in preference to package build testing.
 -- James Page <email address hidden>   Mon, 06 Jan 2014 10:16:46 +0000

Available diffs

• diff from 0.8.8-1ubuntu1 to 0.8.8-1ubuntu2 (932 bytes)

waitress (0.8.8-1ubuntu1) trusty; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - d/tests/*: Add DEP-8 tests.

Available diffs

• diff from 0.8.7-2ubuntu4 to 0.8.8-1ubuntu1 (7.5 KiB)

waitress (0.8.7-2ubuntu4) trusty; urgency=low

  * d/tests/control: Add allow-stderr restriction so that test output
    on stderr does not cause test failures.
 -- James Page <email address hidden>   Tue, 10 Dec 2013 09:03:13 +0000

Available diffs

• diff from 0.8.7-2ubuntu1 to 0.8.7-2ubuntu4 (777 bytes)
• diff from 0.8.7-2ubuntu3 to 0.8.7-2ubuntu4 (535 bytes)

waitress (0.8.7-2ubuntu3) trusty; urgency=low

  * Fix typo in dep8 tests.
 -- Chuck Short <email address hidden>   Mon, 09 Dec 2013 20:19:15 -0500

Available diffs

• diff from 0.8.7-2ubuntu2 to 0.8.7-2ubuntu3 (414 bytes)

waitress (0.8.7-2ubuntu2) trusty; urgency=low

  * Add dep-8 tests.
 -- Chuck Short <email address hidden>   Mon, 09 Dec 2013 09:32:53 -0500

Available diffs

• diff from 0.8.7-2ubuntu1 to 0.8.7-2ubuntu2 (643 bytes)

waitress (0.8.7-2ubuntu1) trusty; urgency=low

  * d/control: Switch to using dh-python, drop versioning on python3 BD.
 -- James Page <email address hidden>   Fri, 06 Dec 2013 09:39:22 +0000

Available diffs

• diff from 0.8.7-2 (in Debian) to 0.8.7-2ubuntu1 (648 bytes)

waitress (0.8.7-2) unstable; urgency=low


  * Update the watch file.
  * Use alternatives to ensure co-installability of python2 and python3
    versions (Closes: #725260).

 -- Andrew Shadura <email address hidden>  Thu, 03 Oct 2013 15:44:25 +0200

Available diffs

• diff from 0.8.1-1~python2 to 0.8.7-2 (47.7 KiB)

waitress (0.8.1-1~python2) unstable; urgency=low


  * Initial release (Python2-only build).

 -- Andrew Shadura <email address hidden>  Thu, 09 May 2013 15:36:13 +0200