launchpad-reviewers team mailing list archive

[Simone Pelosi <mp+440150@xxxxxxxxxxxxxxxxxx>]

Simone Pelosi has proposed merging ~pelpsi/rutabaga/+git/dependencies:gunicorn-upgrade-HTTP-request-smuggling-vulnerability into rutabaga:master.

Commit message:
Upgraded gunicorn to fix HTTP request smuggling vulnerability

A penetration test found that our gunicorn version is vulnerable, version 20.1.0 should be safe.

Requested reviews:
  Launchpad code reviewers (launchpad-reviewers)

For more details, see:
https://code.launchpad.net/~pelpsi/rutabaga/+git/dependencies/+merge/440150
-- 
Your team Launchpad code reviewers is requested to review the proposed merge of ~pelpsi/rutabaga/+git/dependencies:gunicorn-upgrade-HTTP-request-smuggling-vulnerability into rutabaga:master.

diff --git a/Jinja2-2.10.1.tar.gz b/Jinja2-2.10.1.tar.gz
new file mode 100644
index 0000000..ffd1054
Binary files /dev/null and b/Jinja2-2.10.1.tar.gz differ
diff --git a/MarkupSafe-1.1.1.tar.gz b/MarkupSafe-1.1.1.tar.gz
new file mode 100644
index 0000000..a6dad8e
Binary files /dev/null and b/MarkupSafe-1.1.1.tar.gz differ
diff --git a/Paste-2.0.2.tar.gz b/Paste-2.0.2.tar.gz
new file mode 100644
index 0000000..1ebbce7
Binary files /dev/null and b/Paste-2.0.2.tar.gz differ
diff --git a/PasteDeploy-1.5.2.tar.gz b/PasteDeploy-1.5.2.tar.gz
new file mode 100644
index 0000000..fd4f9e1
Binary files /dev/null and b/PasteDeploy-1.5.2.tar.gz differ
diff --git a/PyYAML-3.11.tar.gz b/PyYAML-3.11.tar.gz
new file mode 100644
index 0000000..2a5d431
Binary files /dev/null and b/PyYAML-3.11.tar.gz differ
diff --git a/PyYAML-5.2.tar.gz b/PyYAML-5.2.tar.gz
new file mode 100644
index 0000000..666d12a
Binary files /dev/null and b/PyYAML-5.2.tar.gz differ
diff --git a/Tempita-0.5.2.tar.gz b/Tempita-0.5.2.tar.gz
new file mode 100644
index 0000000..755befc
Binary files /dev/null and b/Tempita-0.5.2.tar.gz differ
diff --git a/WebOb-1.5.1.tar.gz b/WebOb-1.5.1.tar.gz
new file mode 100644
index 0000000..689a47c
Binary files /dev/null and b/WebOb-1.5.1.tar.gz differ
diff --git a/WebTest-2.0.18.zip b/WebTest-2.0.18.zip
new file mode 100644
index 0000000..a4a22de
Binary files /dev/null and b/WebTest-2.0.18.zip differ
diff --git a/argparse-1.4.0.tar.gz b/argparse-1.4.0.tar.gz
new file mode 100644
index 0000000..937eea6
Binary files /dev/null and b/argparse-1.4.0.tar.gz differ
diff --git a/beautifulsoup4-4.4.1.tar.gz b/beautifulsoup4-4.4.1.tar.gz
new file mode 100644
index 0000000..5080765
Binary files /dev/null and b/beautifulsoup4-4.4.1.tar.gz differ
diff --git a/charmhelpers-0.20.22.tar.gz b/charmhelpers-0.20.22.tar.gz
new file mode 100644
index 0000000..bd5d222
Binary files /dev/null and b/charmhelpers-0.20.22.tar.gz differ
diff --git a/charms.reactive-1.4.1.tar.gz b/charms.reactive-1.4.1.tar.gz
new file mode 100644
index 0000000..03bc1fe
Binary files /dev/null and b/charms.reactive-1.4.1.tar.gz differ
diff --git a/colander-1.0.tar.gz b/colander-1.0.tar.gz
new file mode 100644
index 0000000..e60c8b4
Binary files /dev/null and b/colander-1.0.tar.gz differ
diff --git a/cornice-1.0.0.tar.gz b/cornice-1.0.0.tar.gz
new file mode 100644
index 0000000..624e4eb
Binary files /dev/null and b/cornice-1.0.0.tar.gz differ
diff --git a/envdir-0.7.tar.gz b/envdir-0.7.tar.gz
new file mode 100644
index 0000000..e5cff3d
Binary files /dev/null and b/envdir-0.7.tar.gz differ
diff --git a/envdir-1.0.1.tar.gz b/envdir-1.0.1.tar.gz
new file mode 100644
index 0000000..7b290d1
Binary files /dev/null and b/envdir-1.0.1.tar.gz differ
diff --git a/extras-0.0.3.tar.gz b/extras-0.0.3.tar.gz
new file mode 100644
index 0000000..46133fd
Binary files /dev/null and b/extras-0.0.3.tar.gz differ
diff --git a/fixtures-1.3.1.tar.gz b/fixtures-1.3.1.tar.gz
new file mode 100644
index 0000000..1d55ac2
Binary files /dev/null and b/fixtures-1.3.1.tar.gz differ
diff --git a/flake8-2.5.0.tar.gz b/flake8-2.5.0.tar.gz
new file mode 100644
index 0000000..890e6b8
Binary files /dev/null and b/flake8-2.5.0.tar.gz differ
diff --git a/gunicorn-19.3.0.tar.gz b/gunicorn-19.3.0.tar.gz
new file mode 100644
index 0000000..1d38258
Binary files /dev/null and b/gunicorn-19.3.0.tar.gz differ
diff --git a/gunicorn-20.1.0.tar.gz b/gunicorn-20.1.0.tar.gz
new file mode 100644
index 0000000..b5da493
Binary files /dev/null and b/gunicorn-20.1.0.tar.gz differ
diff --git a/iso8601-0.1.10.tar.gz b/iso8601-0.1.10.tar.gz
new file mode 100644
index 0000000..741df00
Binary files /dev/null and b/iso8601-0.1.10.tar.gz differ
diff --git a/linecache2-1.0.0.tar.gz b/linecache2-1.0.0.tar.gz
new file mode 100644
index 0000000..4604f93
Binary files /dev/null and b/linecache2-1.0.0.tar.gz differ
diff --git a/mccabe-0.3.1.tar.gz b/mccabe-0.3.1.tar.gz
new file mode 100644
index 0000000..c613d37
Binary files /dev/null and b/mccabe-0.3.1.tar.gz differ
diff --git a/netaddr-0.7.19.tar.gz b/netaddr-0.7.19.tar.gz
new file mode 100644
index 0000000..cc31d9d
Binary files /dev/null and b/netaddr-0.7.19.tar.gz differ
diff --git a/pbr-1.8.1.tar.gz b/pbr-1.8.1.tar.gz
new file mode 100644
index 0000000..245c14e
Binary files /dev/null and b/pbr-1.8.1.tar.gz differ
diff --git a/pbr-5.6.0.tar.gz b/pbr-5.6.0.tar.gz
new file mode 100644
index 0000000..0d5c965
Binary files /dev/null and b/pbr-5.6.0.tar.gz differ
diff --git a/pep8-1.5.7.tar.gz b/pep8-1.5.7.tar.gz
new file mode 100644
index 0000000..cdfd693
Binary files /dev/null and b/pep8-1.5.7.tar.gz differ
diff --git a/pip-18.1.tar.gz b/pip-18.1.tar.gz
new file mode 100644
index 0000000..a18192d
Binary files /dev/null and b/pip-18.1.tar.gz differ
diff --git a/pip-19.0.2.tar.gz b/pip-19.0.2.tar.gz
new file mode 100644
index 0000000..307a175
Binary files /dev/null and b/pip-19.0.2.tar.gz differ
diff --git a/pip-7.1.2.tar.gz b/pip-7.1.2.tar.gz
new file mode 100644
index 0000000..56ead41
Binary files /dev/null and b/pip-7.1.2.tar.gz differ
diff --git a/pyaml-21.8.3.tar.gz b/pyaml-21.8.3.tar.gz
new file mode 100644
index 0000000..6b6c197
Binary files /dev/null and b/pyaml-21.8.3.tar.gz differ
diff --git a/pyflakes-1.0.0.tar.gz b/pyflakes-1.0.0.tar.gz
new file mode 100644
index 0000000..ac9dc8b
Binary files /dev/null and b/pyflakes-1.0.0.tar.gz differ
diff --git a/pyramid-1.5.7.tar.gz b/pyramid-1.5.7.tar.gz
new file mode 100644
index 0000000..f1ced3b
Binary files /dev/null and b/pyramid-1.5.7.tar.gz differ
diff --git a/python-mimeparse-0.1.4.tar.gz b/python-mimeparse-0.1.4.tar.gz
new file mode 100644
index 0000000..f117f57
Binary files /dev/null and b/python-mimeparse-0.1.4.tar.gz differ
diff --git a/repoze.lru-0.6.tar.gz b/repoze.lru-0.6.tar.gz
new file mode 100644
index 0000000..81e8ee5
Binary files /dev/null and b/repoze.lru-0.6.tar.gz differ
diff --git a/requests-2.7.0.tar.gz b/requests-2.7.0.tar.gz
new file mode 100644
index 0000000..0a67c73
Binary files /dev/null and b/requests-2.7.0.tar.gz differ
diff --git a/setuptools-18.5.tar.gz b/setuptools-18.5.tar.gz
new file mode 100644
index 0000000..cd2ab62
Binary files /dev/null and b/setuptools-18.5.tar.gz differ
diff --git a/setuptools-41.6.0.zip b/setuptools-41.6.0.zip
new file mode 100644
index 0000000..3345759
Binary files /dev/null and b/setuptools-41.6.0.zip differ
diff --git a/setuptools-42.0.2.zip b/setuptools-42.0.2.zip
new file mode 100644
index 0000000..ab08097
Binary files /dev/null and b/setuptools-42.0.2.zip differ
diff --git a/setuptools_scm-1.17.0.tar.gz b/setuptools_scm-1.17.0.tar.gz
new file mode 100644
index 0000000..43b16c7
Binary files /dev/null and b/setuptools_scm-1.17.0.tar.gz differ
diff --git a/simplejson-3.8.1.tar.gz b/simplejson-3.8.1.tar.gz
new file mode 100644
index 0000000..417ade6
Binary files /dev/null and b/simplejson-3.8.1.tar.gz differ
diff --git a/six-1.10.0.tar.gz b/six-1.10.0.tar.gz
new file mode 100644
index 0000000..ac8eec5
Binary files /dev/null and b/six-1.10.0.tar.gz differ
diff --git a/six-1.16.0.tar.gz b/six-1.16.0.tar.gz
new file mode 100644
index 0000000..5bf3a27
Binary files /dev/null and b/six-1.16.0.tar.gz differ
diff --git a/testtools-1.8.0.tar.gz b/testtools-1.8.0.tar.gz
new file mode 100644
index 0000000..dd5f9ed
Binary files /dev/null and b/testtools-1.8.0.tar.gz differ
diff --git a/traceback2-1.4.0.tar.gz b/traceback2-1.4.0.tar.gz
new file mode 100644
index 0000000..7043739
Binary files /dev/null and b/traceback2-1.4.0.tar.gz differ
diff --git a/translationstring-1.3.tar.gz b/translationstring-1.3.tar.gz
new file mode 100644
index 0000000..52c8c1e
Binary files /dev/null and b/translationstring-1.3.tar.gz differ
diff --git a/unittest2-1.1.0-py2.py3-none-any.whl b/unittest2-1.1.0-py2.py3-none-any.whl
new file mode 100644
index 0000000..00bca37
Binary files /dev/null and b/unittest2-1.1.0-py2.py3-none-any.whl differ
diff --git a/unittest2-1.1.0.tar.gz b/unittest2-1.1.0.tar.gz
new file mode 100644
index 0000000..ec686eb
Binary files /dev/null and b/unittest2-1.1.0.tar.gz differ
diff --git a/venusian-1.0.tar.gz b/venusian-1.0.tar.gz
new file mode 100644
index 0000000..c8fc8cc
Binary files /dev/null and b/venusian-1.0.tar.gz differ
diff --git a/waitress-0.8.10.tar.gz b/waitress-0.8.10.tar.gz
new file mode 100644
index 0000000..b54e000
Binary files /dev/null and b/waitress-0.8.10.tar.gz differ
diff --git a/waitress-0.8.9.tar.gz b/waitress-0.8.9.tar.gz
new file mode 100644
index 0000000..73fb6e6
Binary files /dev/null and b/waitress-0.8.9.tar.gz differ
diff --git a/wheel-0.33.1.tar.gz b/wheel-0.33.1.tar.gz
new file mode 100644
index 0000000..bab94be
Binary files /dev/null and b/wheel-0.33.1.tar.gz differ
diff --git a/wheel-0.33.6.tar.gz b/wheel-0.33.6.tar.gz
new file mode 100644
index 0000000..c922c4e
Binary files /dev/null and b/wheel-0.33.6.tar.gz differ
diff --git a/zope.deprecation-4.1.2.tar.gz b/zope.deprecation-4.1.2.tar.gz
new file mode 100644
index 0000000..5522180
Binary files /dev/null and b/zope.deprecation-4.1.2.tar.gz differ
diff --git a/zope.interface-4.1.3.tar.gz b/zope.interface-4.1.3.tar.gz
new file mode 100644
index 0000000..c9e652f
Binary files /dev/null and b/zope.interface-4.1.3.tar.gz differ