python-httplib2 (0.20.4-3ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: unbounded decompression of HTTP response bodies
    - debian/patches/CVE-2026-59939.patch: decompression limited by size and
      ratio; require python 3.8+ in README.md, python3/httplib2/__init__.py,
      python3/httplib2/decode.py, setup.cfg, tests/__init__.py,
      tests/test_encoding.py.
    - CVE-2026-59939

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 10 Jul 2026 07:26:31 -0400

python-httplib2 (0.20.4-3) unstable; urgency=medium

  * Team upload.
  * Remove unused d/s/include-binaries
  * Use dh-sequence-python3
  * Update (build) dependencies (Closes: #1027634)
  * Switch to autopkgtest-pkg-pybuild
  * Bump policy version (no changes)

 -- Jochen Sprickerhof <jspricke@debian.org>  Tue, 03 Jan 2023 08:12:26 +0100

python-httplib2 (0.20.4-2) unstable; urgency=medium

  * debian/tests/control
    - build builddep in autopkgtests deps

 -- Sandro Tosi <morph@debian.org>  Sat, 02 Jul 2022 00:15:51 -0400

python-httplib2 (0.20.4-1) unstable; urgency=medium

  * New upstream release, supporting pytest7; Closes: #1013712
  * debian/patches
    - refresh/adjust patches
  * debian/control
    - add cryptography to b-d, needed by tests

 -- Sandro Tosi <morph@debian.org>  Sun, 26 Jun 2022 23:56:59 -0400

python-httplib2 (0.20.2-3) unstable; urgency=medium

  * Remove constraints unnecessary since buster:
    + python3-httplib2: Drop versioned constraint on python3-pysimplesoap in
      Breaks.

 -- Debian Janitor <janitor@jelmer.uk>  Wed, 25 May 2022 20:49:55 +0100

python-httplib2 (0.20.2-2) unstable; urgency=medium

  * Team upload.
  * Add explicit Depends on python3-pyparsing, a new dependency as of 0.19.
    dh_python3 ignored it due to python_version constraints.

 -- Stefano Rivera <stefanor@debian.org>  Fri, 26 Nov 2021 07:06:34 -0400

python-httplib2 (0.20.2-1) unstable; urgency=medium

  [ Stefano Rivera ]
  * Team upload.
  * New upstream release. (Closes: #997479)
    - Fixes CVE-2021-21240 (Closes: #982738)
  * Refresh patches.
  * Bump Standards-Version to 4.6.0, no changes needed.

  [ Debian Janitor ]
  * Bump debhelper from old 12 to 13.

 -- Stefano Rivera <stefanor@debian.org>  Thu, 25 Nov 2021 21:38:14 -0400

python-httplib2 (0.18.1-3) unstable; urgency=medium

  * Team upload
  * Explicitly pass test directory argument to pytest, hopefully fixing FTBFS
    on buildds.

 -- Stefano Rivera <stefanor@debian.org>  Sat, 30 Jan 2021 22:22:56 -0700

python-httplib2 (0.18.1-2) unstable; urgency=medium

  * Team upload

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Debian Janitor ]
  * Set upstream metadata fields: Security-Contact.

  [ Stefano Rivera ]
  * Breaks: python3-wsgi-intercept (<< 1.9.0). (Closes: #956427)
  * Enable build-time tests, they work without internet access.
    - Build-Depend on python3-{mock,pytest,pytest-timeout}, ca-certificates.
    - Patch: Disable pytest-cov.
  * Bump Standards-Version to 4.5.1, no changes needed.
  * Update watch file to compat 4.
  * Declare Rules-Requires-Root: no.

 -- Stefano Rivera <stefanor@debian.org>  Sat, 30 Jan 2021 21:33:03 -0700

python-httplib2 (0.18.1-1) unstable; urgency=medium

  * Team upload

  [ Lukas Märdian ]
  * Bump version to 0.18.1
    - Fix security vulnerability CWE-98 CRLF injection
    - https://cwe.mitre.org/data/definitions/93.html
  * Add d/p/skip-broken-autopkgtests.patch
    - Skip 5 tests, which do not run properly in an isolated autopkgtest
      environment

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 27 May 2020 20:03:06 +0100

python-httplib2 (0.17.4-1) unstable; urgency=medium

  [ Lukas Märdian ]
  * Bump version to 0.17.4
  * Use upstream's new test suite in tests/ & test/
    - python3/httplib2test.py is deprecated
  * Refresh d/p/0001-Use-system-ca-certificates-not-the-bundled-ones.patch
  * Drop d/p/0002-Fix-debug-in-HTTPSConnectionWithTimeout.connect.patch
    - Fixed upstream
  * Add d/p/skip-ca-md-too-weak-ssl-tests.patch
    - Skip some tests, which fail because of CA_MD_TOO_WEAK ssl error with
      newer OpenSSL version

  [ Jelmer Vernooĳ ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.5.0, no changes needed.

 -- Jelmer Vernooĳ <jelmer@debian.org>  Wed, 20 May 2020 19:03:38 +0000

python-httplib2 (0.14.0-3) unstable; urgency=medium

  * Team upload.
  * Fix crash in debug print in HTTPSConnectionWithTimeout.connect.

 -- Colin Watson <cjwatson@debian.org>  Sat, 11 Apr 2020 00:21:55 +0100

python-httplib2 (0.14.0-2) unstable; urgency=medium

  * Drop python2 support; Closes: #937817

 -- Sandro Tosi <morph@debian.org>  Fri, 27 Mar 2020 22:34:15 -0400

python-httplib2 (0.14.0-1) unstable; urgency=medium

  * Team upload.

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.1.

  [ Håvard Flaget Aasen ]
  * New upstream version 0.14.0
  * Bump debhelper to 12.
  * Rebase patches onto 0.14.0

  [ Jonathan Carter ]
  * Remove ancient versioned depends for python-all and python3-all

 -- Håvard Flaget Aasen <haavard_aasen@yahoo.no>  Mon, 18 Nov 2019 11:13:37 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python3-httplib2`.
