python-aiohttp (3.8.1-4ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: When 'follow_symlinks' is enabled, file paths 
    are not properly validated, allowing unauthorized access to      
    files on the system.
    - debian/patches/CVE-2024-23334.patch: Validate static paths.
    - CVE-2024-23334 

 -- Chris Kim <chris.kim@canonical.com>  Fri, 30 Aug 2024 14:29:01 -0700

python-aiohttp (3.8.1-4build1) jammy; urgency=medium

  * No-change rebuild with Python 3.10 only

 -- Graham Inggs <ginggs@ubuntu.com>  Wed, 16 Mar 2022 19:26:16 +0000

python-aiohttp (3.8.1-4) unstable; urgency=high

  * Team upload.
  * debian/control: Add versioned dependency (Closes: #1001642):
    + python3-async-timeout (>= 4.0.1)
  * debian/py3dist-overrides: Add "idna_ssl python3-idna-ssl" line
    to suppress build error raised by newer dh_python3.

 -- Boyuan Yang <byang@debian.org>  Sun, 19 Dec 2021 01:05:53 -0500

python-aiohttp (3.8.1-3) unstable; urgency=medium

  * Add python3-charset-normalizer to (Build-)Depends (closes: 1000848)

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 30 Nov 2021 13:58:24 +0100

python-aiohttp (3.8.1-2) unstable; urgency=medium

  * New upstream release (closes: 1000680)
  * docs: temporarily remove news (sphinxcontrib.towncrier is not yet packaged)

 -- Piotr Ożarowski <piotr@debian.org>  Sat, 27 Nov 2021 17:20:40 +0100

python-aiohttp (3.7.4-2) unstable; urgency=medium

  * Team upload.

  [ Diego M. Rodriguez ]
  * d/control: add sphinx dependencies to doc package (Closes: #990652)

  [ Debian Janitor ]
  * Apply multi-arch hints.
    + python-aiohttp-doc: Add Multi-Arch: foreign.
  * Bump debhelper from old 12 to 13.

  [ Boyuan Yang ]
  * debian/: Drop manual -dbg package. (Closes: #994345)
  * debian/control: Bump Standards-Version to 4.6.0.

 -- Boyuan Yang <byang@debian.org>  Tue, 16 Nov 2021 12:03:24 -0500

python-aiohttp (3.7.4-1) unstable; urgency=high

  * Team upload
  * New upstream version 3.7.4
  * Fixes only an openredirect issue in normalize_path_middleware middleware
    (CVE-2021-21330) and is thus suitable for bullseye.

 -- Raphaël Hertzog <hertzog@debian.org>  Fri, 26 Feb 2021 09:39:16 +0100

python-aiohttp (3.7.3-2) unstable; urgency=medium

  * No change rebuild.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 26 Feb 2021 09:11:31 +0100

python-aiohttp (3.7.3-1) unstable; urgency=medium

  [ Emmanuel Arias ]
  * Add python-aiohttp-doc package (Closes: #950331)
    - Add d/python-aiohttp-doc* files.
    - d/rules: add override_dh_auto_build for build documentation.
    - d/control: add python3-sphinxcontrib.blockdiag depends for build
      documentation.

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Debian Janitor ]
  * Set field Upstream-Name in debian/copyright.
  * Remove obsolete field Name from debian/upstream/metadata (already present in
    machine-readable debian/copyright).

  [ Piotr Ożarowski ]
  * New upstream release
  * Patch documentation to remove "fork me on Github" button (privacy breach)
  * Standards-Version bumped to 4.5.1 (no changes needed)
  * Update debian/copyright to mention vendor/http-parser files

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 15 Jan 2021 20:52:09 +0100

python-aiohttp (3.6.2-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Bump Standards-Version to 4.4.1.

  [ William Grzybowski ]
  * New upstream release
  * d/control:
    - Add Rules-Requires-Root: no
    - Add sphinxdoc to package Depends
    - Update Standards-Version to 4.4.1
  * d/patches: add patch 0002 to add shebang to examples

 -- William Grzybowski <william@grzy.org>  Wed, 23 Oct 2019 09:51:01 -0300

# For older changelog entries, run 'apt-get changelog python3-aiohttp'
