Python-fedora

Latest version: v1.1.1

Safety actively analyzes 629532 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 14

0.3.34

Not secure
------

* **SECURITY** Fix the jsglobals.html template to escape usernames and human
names to fix potential XSS flaw.
* **SECURITY** Make flask-fas-openid check that the page it is returning the
user to after authentication is from within the application.

* Updated libravatar lookups to use the user's openid identifier instead of
their email address.

------

0.3.33

Not secure
------

* Minimum version of python is now 2.6. Some things may work on older python
but this is not guaranteed. Patches to make it work may or may not be
accepted.
* Added flask_fas_openid for the migration to OpenID
This adds the requirements for python-openid, python-openid-teams and
python-openid-cla.
* Rename the FAS_HTTPS_REQUIRED config variable in the flask_fas auth adapter
to FAS_FLASK_COOKIE_REQUIRES_HTTPS. The longer name is more cumbersome but
the previous name was too often mistaken to be setting whether we needed to
connect to the fas server with https when it really was about whether the
session cookie should require https to be returned to the server (the
cookie's secure flag).
* Change the groups attribute of the flask_fas and flask_fas_openid auth
adapters to be a frozenset instead of a list
* Set a configurable timeout on how long a client request will wait for the
server to setup a connection in BaseClient and ProxyClient.
* Fix instance-wide default retries in BaseClient (and subclasses) being
overridden by the default value of retries in BaseClient.send_request()
* Fix a performance bug in the client modules when the server returns large
json strings. python-requests defaults to trying to detect the charset of
response strings. This takes a very long time on large return values.
Since we know that all responses from the services we're talking to will be
utf-8, we can skip this detection step.
* No longer use paver for building. We just need setuptools now
* Deprecated AccountSystem's gravatar_url method in favor of a new avatar_url
method. This defaults to using the free libravatar service but still allows
API users to fall back on the proprietary gravatar service if they prefer.
python-pylibravatar must be installed for the default to work. If it isn't
found on the user's system, then gravatar.com is made the new default.

--------

0.3.32.3

Not secure
--------

* Fix BodhiClient's knowledge of koji tags

--------

0.3.32.2

Not secure
--------

* Stop setting cookie attributes on the cookie we generate client-side as those
aren't sent to the server and it provokes bugs in python-requests

--------

0.3.32.1

Not secure
--------

* Update documentation on fasproxy.FasProxyClient.login()

------

0.3.32

------

* Replace pyCurl with python-requests in ProxyClient (ralph).
This was in order to fix bugs we were seeing with curl/nss in some contexts.

------

Page 5 of 14

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.