diff --git a/Drop-coverage-from-tests.patch b/Drop-coverage-from-tests.patch deleted file mode 100644 index f3c5c290f26c6fa284f7649075154f6de5a232da..0000000000000000000000000000000000000000 --- a/Drop-coverage-from-tests.patch +++ /dev/null @@ -1,100 +0,0 @@ -From 7b7aee01d72be5a310678cdad189cb7382f28549 Mon Sep 17 00:00:00 2001 -From: Robbie Harwood -Date: Tue, 19 Jan 2021 11:41:40 -0500 -Subject: [PATCH] Drop coverage from tests - -To my knowledge, we've never looked at or done anything with this -output. Test coverage is a noble goal, but this project is mostly -complete, so we don't expect heavy development soon. - -Requested-by: Petr Viktorin -Signed-off-by: Robbie Harwood -(cherry picked from commit 86c3da13d5d6cdb5822d194f2b820da1fd31dddb) -[rharwood@redhat.com: .gitignore] ---- - .coveragerc | 23 ----------------------- - MANIFEST.in | 1 - - setup.py | 2 +- - tox.ini | 12 ++---------- - 4 files changed, 3 insertions(+), 35 deletions(-) - delete mode 100644 .coveragerc - -diff --git a/.coveragerc b/.coveragerc -deleted file mode 100644 -index 4038562..0000000 ---- a/.coveragerc -+++ /dev/null -@@ -1,23 +0,0 @@ --[run] --branch = True --source = -- kdcproxy -- tests.py -- --[paths] --source = -- kdcproxy -- .tox/*/lib/python*/site-packages/kdcproxy -- --[report] --ignore_errors = False --precision = 1 --exclude_lines = -- pragma: no cover -- raise AssertionError -- raise NotImplementedError -- if 0: -- if False: -- if __name__ == .__main__.: -- if PY3 -- if not PY3 -diff --git a/MANIFEST.in b/MANIFEST.in -index 362f840..ff6b9a7 100644 ---- a/MANIFEST.in -+++ b/MANIFEST.in -@@ -2,4 +2,3 @@ include README COPYING - include tox.ini - include setup.cfg - include tests.py tests.krb5.conf --include .coveragerc -diff --git a/setup.py b/setup.py -index 20b335e..4b34fcc 100644 ---- a/setup.py -+++ b/setup.py -@@ -29,7 +29,7 @@ install_requires = [ - ] - - extras_require = { -- "tests": ["pytest", "coverage", "WebTest"], -+ "tests": ["pytest", "WebTest"], - "test_pep8": ['flake8', 'flake8-import-order', 'pep8-naming'] - } - -diff --git a/tox.ini b/tox.ini -index 038d996..9672cee 100644 ---- a/tox.ini -+++ b/tox.ini -@@ -1,21 +1,13 @@ - [tox] - minversion = 2.3.1 --envlist = py36,py37,py38,py39,pep8,py3pep8,doc,coverage-report -+envlist = py36,py37,py38,py39,pep8,py3pep8,doc - skip_missing_interpreters = true - - [testenv] - deps = - .[tests] - commands = -- {envpython} -m coverage run --parallel \ -- -m pytest --capture=no --strict {posargs} -- --[testenv:coverage-report] --deps = coverage --skip_install = true --commands = -- {envpython} -m coverage combine -- {envpython} -m coverage report --show-missing -+ {envpython} -m pytest --capture=no --strict {posargs} - - [testenv:pep8] - basepython = python3 diff --git a/kdcproxy-1.0.0.tar.gz b/kdcproxy-1.0.0.tar.gz deleted file mode 100644 index 9c11f44645c493b7e15c305faea3c80513bf59f4..0000000000000000000000000000000000000000 Binary files a/kdcproxy-1.0.0.tar.gz and /dev/null differ diff --git a/kdcproxy-1.1.0.tar.gz b/kdcproxy-1.1.0.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..b7fdcaed09ec3fbf361cba193b11642618eb68bf Binary files /dev/null and b/kdcproxy-1.1.0.tar.gz differ diff --git a/kdcproxy-1.1.0.tar.gz.sha512sum.txt b/kdcproxy-1.1.0.tar.gz.sha512sum.txt new file mode 100644 index 0000000000000000000000000000000000000000..e69309895310f0180987ffb79ae3e1d61cbcb315 --- /dev/null +++ b/kdcproxy-1.1.0.tar.gz.sha512sum.txt @@ -0,0 +1 @@ +f03b9d40d71322281d0197df6fe6b5936a8d09b0fee49fc5375b61974d005cedc5645f92a223d221c05c6ffd2613a86eb7d7295c4ac27a2f2c9eaa10fa24c182 kdcproxy-1.1.0.tar.gz diff --git a/python-kdcproxy.spec b/python-kdcproxy.spec index 7b50a1900409f64cb067d89519fbe937030418b1..54159c83af81a85f8658e33a30ff8a92b8228baf 100644 --- a/python-kdcproxy.spec +++ b/python-kdcproxy.spec @@ -1,30 +1,30 @@ -%define anolis_release 3 +ExclusiveArch: x86_64 aarch64 %global realname kdcproxy Name: python-%{realname} -Version: 1.0.0 -Release: %{anolis_release}%{?dist} +Version: 1.1.0 +Release: 1%{?dist} Summary: MS-KKDCP (kerberos proxy) WSGI module License: MIT URL: https://github.com/latchset/%{realname} Source0: https://github.com/latchset/%{realname}/releases/download/v%{version}/%{realname}-%{version}.tar.gz +Source1: https://github.com/latchset/%{realname}/releases/download/v%{version}/%{realname}-%{version}.tar.gz.sha512sum.txt + -Patch0: Drop-coverage-from-tests.patch BuildArch: noarch -BuildRequires: git +BuildRequires: git-core -BuildRequires: python3-devel -BuildRequires: python3-dns -BuildRequires: python3-pyasn1 BuildRequires: python3-pytest -BuildRequires: python3-setuptools -%description +%global _description %{expand: This package contains a Python WSGI module for proxying KDC requests over HTTP by following the MS-KKDCP protocol. It aims to be simple to deploy, with minimal configuration. +} + +%description %{_description} %package -n python3-%{realname} Summary: MS-KKDCP (kerberos proxy) WSGI module @@ -33,34 +33,92 @@ Requires: python3-pyasn1 %{?python_provide:%python_provide python3-%{realname}} -%description -n python3-%{realname} -This package contains a Python 3.x WSGI module for proxying KDC requests over -HTTP by following the MS-KKDCP protocol. It aims to be simple to deploy, with -minimal configuration. +%description -n python3-%{realname} %{_description} + +%generate_buildrequires +%pyproject_buildrequires %prep -%autosetup -S git -n %{realname}-%{version} +%autosetup -S git_am -n %{realname}-%{version} %build -%py3_build +%pyproject_wheel %install -%py3_install +%pyproject_install +%pyproject_save_files %{realname} %check -%{__python3} -m pytest +%pyproject_check_import +%pytest -%files -n python3-%{realname} +%files -n python%{python3_pkgversion}-%{realname} -f %{pyproject_files} +%doc README %license COPYING -%{python3_sitelib}/%{realname}/ -%{python3_sitelib}/%{realname}-%{version}-*.egg-info %changelog -* Tue Mar 26 2024 Zhao Hang - 1.0.0-3 -- Rebuild with python3.11 +* Wed Nov 19 2025 Julien Rische - 1.1.0-1 +- New upstream version (1.1.0) +- Use DNS discovery for declared realms only (CVE-2025-59088) + Resolves: RHEL-113652 +- Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) + Resolves: RHEL-113656 + +* Fri Nov 22 2024 Julien Rische - 1.0.0-18 +- Log KDC timeout only once per request + Resolves: RHEL-68354 + +* Tue Oct 29 2024 Troy Dawson - 1.0.0-17 +- Bump release for October 2024 mass rebuild: + Resolves: RHEL-64018 + +* Mon Jun 24 2024 Troy Dawson - 1.0.0-16 +- Bump release for June 2024 mass rebuild + +* Fri Jan 26 2024 Fedora Release Engineering - 1.0.0-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Mon Jan 22 2024 Fedora Release Engineering - 1.0.0-14 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Fri Jul 21 2023 Fedora Release Engineering - 1.0.0-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + +* Thu Jun 15 2023 Python Maint - 1.0.0-12 +- Rebuilt for Python 3.12 + +* Fri Jan 20 2023 Fedora Release Engineering - 1.0.0-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + +* Fri Jul 22 2022 Fedora Release Engineering - 1.0.0-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + +* Tue Jun 14 2022 Python Maint - 1.0.0-9 +- Rebuilt for Python 3.11 + +* Fri Jan 21 2022 Fedora Release Engineering - 1.0.0-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Fri Jul 23 2021 Fedora Release Engineering - 1.0.0-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Fri Jun 04 2021 Python Maint - 1.0.0-6 +- Rebuilt for Python 3.10 + +* Thu Apr 08 2021 Robbie Harwood - 1.0.0-5 +- Actually drop coverage dependency + +* Fri Jan 29 2021 Robbie Harwood - 1.0.0-4 +- Drop unused dependency on python3-mock +- Resolves: #1922344 + +* Wed Jan 27 2021 Fedora Release Engineering - 1.0.0-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -* Wed Dec 13 2023 mgb01105731 - 1.0.0-2 -- rebuild +* Wed Jan 20 2021 Robbie Harwood - 1.0.0-2 +- Drop coverage from tests +- Resolves: #1916739 -* Sun Apr 23 2023 Funda Wang - 1.0.0-1 -- Import package for anolis 23 +* Tue Dec 08 2020 Robbie Harwood - 1.0.0-1 +- New upstream version (1.0.0) +- Drop asn1crypto in favor of pyasn1