Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Werkzeug to 0.11.10 #2380

Merged
merged 1 commit into from
Jun 28, 2016
Merged

Upgrade Werkzeug to 0.11.10 #2380

merged 1 commit into from
Jun 28, 2016

Conversation

fabaff
Copy link
Member

@fabaff fabaff commented Jun 27, 2016

Version 0.11.10

Released on May 24th 2016.

  • Fixed a bug that occurs when running on Python 2.6 and using a broken locale.
  • Fixed a crash when running the debugger on Google App Engine.
  • Fixed an issue with multipart parsing that could cause memory exhaustion.

Version 0.11.9

Released on April 24th 2016.

  • Corrected an issue that caused the debugger not to use the machine GUID on POSIX systems.
  • Corrected an Unicode error on Python 3 for the debugger's PIN usage.
  • Corrected the timestamp verification in the pin debug code. Without this fix the pin was remembered for too long.

Version 0.11.8

Released on April 15th 2016.

  • fixed a problem with the machine GUID detection code on OS X on Python 3.

Version 0.11.7

Released on April 14th 2016.

  • fixed a regression on Python 3 for the debugger.

Version 0.11.6

Released on April 14th 2016.

  • werkzeug.serving: Still show the client address on bad requests.
  • improved the PIN based protection for the debugger to make it harder to brute force via trying cookies. Please keep in mind that the debugger is not intended for running on production environments
  • increased the pin timeout to a week to make it less annoying for people which should decrease the change that users disable the pin check entirely.
  • werkzeug.serving: Fix broken HTTP_HOST when path starts with double slash.

Tested with the following configuration:

http:
  api_password: mypass

@fabaff fabaff closed this Jun 27, 2016
@fabaff fabaff reopened this Jun 27, 2016
@balloob balloob merged commit 592c599 into home-assistant:dev Jun 28, 2016
@fabaff fabaff deleted the werkzeug-upgrade branch June 29, 2016 06:12
@home-assistant home-assistant locked and limited conversation to collaborators Mar 17, 2017
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants