From 8373177d3a9e4dd9c956f9bded22a5f96a00957b Mon Sep 17 00:00:00 2001 From: Sergey Shepelev Date: Wed, 20 May 2020 15:40:47 +0300 Subject: v0.18.0 release --- CHANGELOG | 7 +++++++ python2/httplib2/__init__.py | 2 +- python3/httplib2/__init__.py | 2 +- setup.py | 2 +- 4 files changed, 10 insertions(+), 3 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 4f4ca13..86c24a7 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,10 @@ +0.18.0 + + IMPORTANT security vulnerability CWE-93 CRLF injection + Force %xx quote of space, CR, LF characters in uri. + Special thanks to Recar https://github.com/Ciyfly for discrete notification. + https://cwe.mitre.org/data/definitions/93.html + 0.17.4 Ship test suite in source dist diff --git a/python2/httplib2/__init__.py b/python2/httplib2/__init__.py index 34281b7..d29193d 100644 --- a/python2/httplib2/__init__.py +++ b/python2/httplib2/__init__.py @@ -19,7 +19,7 @@ __contributors__ = [ "Alex Yu", ] __license__ = "MIT" -__version__ = '0.17.4' +__version__ = "0.18.0" import base64 import calendar diff --git a/python3/httplib2/__init__.py b/python3/httplib2/__init__.py index c0b1418..f5d7672 100644 --- a/python3/httplib2/__init__.py +++ b/python3/httplib2/__init__.py @@ -15,7 +15,7 @@ __contributors__ = [ "Alex Yu", ] __license__ = "MIT" -__version__ = '0.17.4' +__version__ = "0.18.0" import base64 import calendar diff --git a/setup.py b/setup.py index c711176..d8d9c48 100755 --- a/setup.py +++ b/setup.py @@ -4,7 +4,7 @@ import setuptools.command.test import sys pkgdir = {"": "python%s" % sys.version_info[0]} -VERSION = '0.17.4' +VERSION = "0.18.0" # `python setup.py test` uses existing Python environment, no virtualenv, no pip. -- cgit v1.2.3