python-waitress/python-waitress.spec

78 lines
3.0 KiB
RPMSpec
Raw Permalink Normal View History

2020-02-17 16:51:22 +08:00
%global _docdir_fmt %{name}
Name: python-waitress
Version: 1.4.4
Release: 1
2020-02-17 16:51:22 +08:00
Summary: A WSGI server for Python 2 and 3
License: ZPL-2.1
2020-02-17 16:51:22 +08:00
URL: https://github.com/Pylons/waitress
Source0: https://github.com/Pylons/waitress/archive/v%{version}/waitress-%{version}.tar.gz
# https://lists.debian.org/debian-lts-announce/2024/11/msg00012.html
Patch0: CVE-2024-49769-0001-Remove-test-for-getpeername.patch
Patch1: CVE-2024-49769-0002-When-closing-the-socket-set-it-to-None.patch
Patch2: CVE-2024-49769-0003-Don-t-exit-handle_write-early-even-if-socket-is-not-.patch
Patch3: CVE-2024-49769-0004-Assume-socket-is-not-connected-when-passed-to-wasync.patch
Patch4: CVE-2024-49769-0005-HTTPChannel-is-always-created-from-accept-explicitly.patch
2020-02-17 16:51:22 +08:00
BuildArch: noarch
%description
Waitress is meant to be a production-quality pure-Python WSGI server
with very acceptable performance. It has no dependencies except ones
which live in the Python standard library. It runs on CPython on Unix
and Windows under Python 2.7+ and Python 3.5+. It is also known to run
on PyPy 1.6.0+ on UNIX. It supports HTTP/1.0 and HTTP/1.1.
%package -n python2-waitress
%{?python_provide:%python_provide python2-waitress}
Summary: A WSGI server for Python 2 and 3
BuildRequires: python2-devel, python2-setuptools, python2-nose, python2-coverage
%description -n python2-waitress
Waitress is meant to be a production-quality pure-Python WSGI server
with very acceptable performance. It has no dependencies except ones
which live in the Python standard library. It runs on CPython on Unix
and Windows under Python 2.7+ and Python 3.5+. It is also known to run
on PyPy 1.6.0+ on UNIX. It supports HTTP/1.0 and HTTP/1.1.
%package -n python3-waitress
%{?python_provide:%python_provide python3-waitress}
Summary: A WSGI server for Python 2 and 3
BuildRequires: python3-devel, python3-setuptools, python3-nose, python3-coverage
%description -n python3-waitress
Waitress is meant to be a production-quality pure-Python WSGI server
with very acceptable performance. It has no dependencies except ones
which live in the Python standard library. It runs on CPython on Unix
and Windows under Python 2.7+ and Python 3.5+. It is also known to run
on PyPy 1.6.0+ on UNIX. It supports HTTP/1.0 and HTTP/1.1.
%prep
%autosetup -n waitress-%{version} -p1
2020-02-17 16:51:22 +08:00
%build
%py2_build
%py3_build
%install
%py2_install
%py3_install
%files -n python2-waitress
%license COPYRIGHT.txt LICENSE.txt
%doc README.rst CHANGES.txt
%{python2_sitelib}/*
%files -n python3-waitress
%license COPYRIGHT.txt LICENSE.txt
%doc README.rst CHANGES.txt
%{_bindir}/waitress-serve
%{python3_sitelib}/*
%changelog
* Tue Apr 15 2025 yaoxin <1024769339@qq.com> - 1.4.4-1
- Update to 1.4.4 for fix CVE-2019-16785,CVE-2019-16786,CVE-2019-16789 and CVE-2019-16792
- Add patches for CVE-2024-49769: DoS due to resource exhaustion
2020-02-17 16:51:22 +08:00
* Thu Feb 13 2020 Ruijun Ge <geruijun@huawei.com> - 1.1.0-5
- init package