Skip to content

v1.0.1

Compare
Choose a tag to compare
@Nusnus Nusnus released this 17 Jul 20:25
· 83 commits to main since this release
e2d8b76

What's Changed

Fixes & Changes

  • Cleanup: pytest-celery[all]==1.0.0b4 -> pytest-celery[all]==1.0.0 by @Nusnus in #330
  • Fixed hybrid_setup example build error with legacy.Dockerfile by @Nusnus in #331
  • Fix typos by @yenshirak in #339
  • Prepare for release: v1.0.1 by @Nusnus in #351
  • Added changelog for v1.0.1 by @Nusnus in #350

Security Fixes

  • CVE-2024-39689: Certifi removes GLOBALTRUST root certificate
  • CVE-2024-3651: Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode
  • CVE-2024-34064: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
  • GHSA-753j-mpmx-qq6g: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
  • GHSA-w235-7p84-xx57: Tornado has a CRLF injection in CurlAsyncHTTPClient headers
  • CVE-2024-37891: urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
  • CVE-2024-5569: zipp Denial of Service vulnerability
  • CVE-2024-35195: Requests Session object does not verify requests after making first request with verify=False

Dependencies Updates

New Contributors

Full Changelog: v1.0.0...v1.0.1