aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSergey Shepelev <temotor@gmail.com>2020-05-20 15:40:47 +0300
committerSergey Shepelev <temotor@gmail.com>2020-05-20 15:55:27 +0300
commit8373177d3a9e4dd9c956f9bded22a5f96a00957b (patch)
treefba0bdc81eb3d60ead69892e14805be08fc2f169
parent9fef207e85eef0534574d71fe1338c01874eba46 (diff)
downloadhttplib2-8373177d3a9e4dd9c956f9bded22a5f96a00957b.tar.gz
v0.18.0 release
-rw-r--r--CHANGELOG7
-rw-r--r--python2/httplib2/__init__.py2
-rw-r--r--python3/httplib2/__init__.py2
-rwxr-xr-xsetup.py2
4 files changed, 10 insertions, 3 deletions
diff --git a/CHANGELOG b/CHANGELOG
index 4f4ca13..86c24a7 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,10 @@
+0.18.0
+
+ IMPORTANT security vulnerability CWE-93 CRLF injection
+ Force %xx quote of space, CR, LF characters in uri.
+ Special thanks to Recar https://github.com/Ciyfly for discrete notification.
+ https://cwe.mitre.org/data/definitions/93.html
+
0.17.4
Ship test suite in source dist
diff --git a/python2/httplib2/__init__.py b/python2/httplib2/__init__.py
index 34281b7..d29193d 100644
--- a/python2/httplib2/__init__.py
+++ b/python2/httplib2/__init__.py
@@ -19,7 +19,7 @@ __contributors__ = [
"Alex Yu",
]
__license__ = "MIT"
-__version__ = '0.17.4'
+__version__ = "0.18.0"
import base64
import calendar
diff --git a/python3/httplib2/__init__.py b/python3/httplib2/__init__.py
index c0b1418..f5d7672 100644
--- a/python3/httplib2/__init__.py
+++ b/python3/httplib2/__init__.py
@@ -15,7 +15,7 @@ __contributors__ = [
"Alex Yu",
]
__license__ = "MIT"
-__version__ = '0.17.4'
+__version__ = "0.18.0"
import base64
import calendar
diff --git a/setup.py b/setup.py
index c711176..d8d9c48 100755
--- a/setup.py
+++ b/setup.py
@@ -4,7 +4,7 @@ import setuptools.command.test
import sys
pkgdir = {"": "python%s" % sys.version_info[0]}
-VERSION = '0.17.4'
+VERSION = "0.18.0"
# `python setup.py test` uses existing Python environment, no virtualenv, no pip.