| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: python313-aiosmtplib | Distribution: openSUSE Tumbleweed |
| Version: 5.1.3 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Sep 14 16:24:40 2026 |
| Group: Development/Languages/Python | Build host: reproducible |
| Size: 252995 | Source RPM: python-aiosmtplib-5.1.3-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/cole/aiosmtplib | |
| Summary: Python asyncio SMTP client | |
Python asyncio SMTP client.
MIT
* Mon Sep 14 2026 Nico Krapp <nico.krapp@suse.com>
- Update to 5.1.3 (fixes CVE-2026-90467 (bsc#1280277)):
* Security: reject addresses containing whitespace or angle brackets outside
of a quoted local part in mail, rcpt, vrfy, expn and sendmail.
Previously, a caller supplied address such as
user@example.com> AUTH=<attacker@example.com could smuggle additional ESMTP
parameters onto the command line. This is a follow up to the fix in 5.1.1 for
CVE-2026-53533 (GHSA-v3q9-hj7j-63hq), which only rejected control characters.
sendmail now validates all addresses before sending any commands.
* Bugfix: reject local_hostname values (and the hostname argument to
helo/ehlo) containing whitespace or control characters, so a hostname
such as me.example.com XCLIENT ADDR=1.2.3.4 can no longer smuggle extra
parameters onto the EHLO/HELO command line. Surrounding whitespace is stripped.
* Bugfix: raise SMTPAuthenticationError instead of binascii.Error when the
server sends a malformed (non-base64) CRAM-MD5 challenge, so login can fall
back to the next auth method
* Bugfix: prevent SMTP command/response desync from unsolicited server data (thanks
@Charisn for contributing)
* Bugfix: handle protocol connection lost callback arriving after reconnect
* Bugfix: close connection on async context manager exit in cases of a server error response
* Bugfix: release connection lock on connect timeout
* Bugfix: re-derive the default port on each connect() so changing
use_tls/start_tls between connects no longer reuses a stale default.
Defaulted port/hostname are now resolved per-connect rather than
written back onto the instance, so they read back as None when unset
* Bugfix: typeerror in latest ty
* Bugfix: mark response waiter exceptions as retrieved when they are set, so
Future exception was never retrieved is no longer logged on free-threaded
builds where the previous __del__ based cleanup ran too late
* CI: test on free-threaded 3.14 and on 3.15 (standard and free-threaded)
* Bugfix: the SIZE parameter sent with MAIL FROM now reports the number
of octets as the message will be transmitted (with CRLF line endings), rather
than the raw length of the message argument
* Bugfix: data arriving on the transport after the connection is lost is now
dropped instead of raising RuntimeError from the protocol callback
* Bugfix: SMTPProtocol now records that it is using TLS after a successful
start_tls, so a second upgrade attempt on the protocol is rejected
* Bugfix: starttls now validates its TLS options before sending EHLO, so
invalid options raise ValueError without touching the connection
* Bugfix: helo no longer records a failed response as last_helo_response,
so a rejected HELO does not leave the session looking as if a greeting succeeded
* Bugfix: bytearray and memoryview values are no longer silently passed
through the auth encoding helpers; only str and bytes are accepted, as
the type annotations already stated
* Bugfix: TLS context setup now run in thread (thanks @tr4nt0r)
* Fri Aug 21 2026 Nico Krapp <nico.krapp@suse.com>
- Update to 5.1.2 (fixes CVE-2026-55558, bsc#1275982)
* Security: Discard any buffered server data before the STARTTLS handshake,
preventing a response-injection attack where a man-in-the-middle pre-stages
plaintext that would otherwise be read as part of the encrypted session
* Bugfix: Corrected SMTPResponse __repr__ result
* Bugfix: Calling connect() on an already-connected client now raises
SMTPException instead of deadlocking on the connection lock
* Feature: Poe command runner for dev tasks
* Bugfix: Timeout ignored during CRAM-MD5 verification
* Bugfix: Only parse EHLO response after validating success
* Bugfix: return None from extract_sender when address list is empty
* Bugfix: Enforce a maximum total response size, preventing unbounded memory
use if a server streams data with no line ending or endless multiline
continuation lines
* Bugfix: Use the invalid_response status code (-1) instead of 500 when a
server response line exceeds the maximum length
* Bugfix: A read timeout now closes the connection instead of leaving it in
a desynced state, where a late server response could be mispaired with a
subsequent command
* Bugfix: Correctly parse old-style AUTH= extension advertisements; all
advertised methods are now kept (e.g. both PLAIN and LOGIN from
AUTH=PLAIN LOGIN)
* Bugfix: ESMTP extension lines with leading whitespace are no longer ignored
- enable testsuite again
* Sun Jun 14 2026 Dirk Müller <dmueller@suse.com>
- update to 5.1.1 (CVE-2026-53533, bsc#1268219):
* Security: Reject control characters (the C0 range 0x00-0x1F
and DEL 0x7F, including CR, LF, and NUL) in SMTP command
arguments, preventing command injection via input passed to
mail(), rcpt(), vrfy(), expn() or sendmail(). Such input now
raises ValueError before anything is written to the
connection. More details: https://github.com/cole/aiosmtplib/
security/advisories/GHSA-v3q9-hj7j-63hq Thanks to
@tonghuaroot for the report.
* Bugfix: SMTP.quit() no longer hangs until the read timeout
when the peer drops the transport with an exception after
QUIT is sent but before the 221 reply is parsed (e.g. AWS SES
closing TLS without close_notify).
* Fri Mar 27 2026 Dirk Müller <dmueller@suse.com>
- update to 5.1.0:
* Feature: Add XOAUTH2 authentication support
* BREAKING: Drop Python 3.9 support
* Bugfix: correct aexit signature to comply with async context
manager protocol (thanks @oliverlambson)
* Thu Aug 07 2025 Daniel Garcia <daniel.garcia@suse.com>
- Disable tests, tests doesn't work with latest pytest-asyncio
gh#cole/aiosmtplib@3b4bd0d7048c
* Tue May 20 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 4.0.1
* Bugfix: Always clear the connect lock on connection lost,
allowing client reconnect
* Fri Apr 04 2025 Nico Krapp <nico.krapp@suse.com>
- Update to 4.0.0
* BREAKING: Drop Python 3.8 support
* Bugfix: Run socket.getfqdn in thread to avoid blocking event loop if local_hostname not provided (thanks @Raidzin)
* Bugfix: Clear connect lock on connection lost, allowing client reconnect
* Bugfix: Allow socket connections to use TLS by providing hostname and use_tls=True
* Fri Nov 08 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 3.0.2
* Bugfix: Type of "send" is partially unknown with pyright
* Bugfix: Fix asyncio deadlock trying to reconnect after error
* Change: Switched from Poetry to build/hatch/twine for packaging.
- Skip test_live and test_tls tests when running testsuite
- Switch package to modern Python Stack on SLE-15
* Use Python 3.11 on SLE-15 by default
* Drop support for older Python versions
- Switch build system from setuptools to pyproject.toml
* Add python-pip and python-wheel to BuildRequires
* Replace %python_build with %pyproject_wheel
* Replace %python_install with %pyproject_install
- Limit Python files matched in %files section
* Tue Nov 14 2023 Dirk Müller <dmueller@suse.com>
- update to 3.0.1:
* Bugfix: 'Future exception was never retrieved' warning in
SMTPProtocol after successful connection close and garbage
collection.
* Cleanup: Updated FlowControlMixin logic from stdlib
are keyword only.
* **BREAKING**: Passing ``source_address`` as a string argument
is now an error. ``source_address`` takes a (addr, port)
tuple that is used as the ``local_addr`` param of
``asyncio.create_connection``, allowing for binding
to a specific IP. The ``local_hostname`` argument takes the
value to be sent to the server with the EHLO/HELO message
(which is what ``source_address`` was used for prior to 2.0).
* Change: don't use timeout value passed to ``connect``
everywhere, only for the initial connection
* Change: removed unnecessary connection lost callback
* Change: revised handling for 'Future exception was never
retrieved' warnings in protocol
* Tue Jun 20 2023 Dirk Müller <dmueller@suse.com>
- update to 2.0.2:
* Bugfix: don't send extra EHLO/HELO before QUIT
* Change: added SMTPConnectionResponseError for invalid
response on connect only
* Fri Feb 10 2023 Dirk Müller <dmueller@suse.com>
- update to 2.0.1:
* Bugfix: "tests" and "docs" in the sdist should be includes,
not packages, so that they do not get put in site-packages.
/usr/lib/python3.13/site-packages/aiosmtplib /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/INSTALLER /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/METADATA /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/RECORD /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/REQUESTED /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/WHEEL /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/licenses /usr/lib/python3.13/site-packages/aiosmtplib-5.1.3.dist-info/licenses/LICENSE.txt /usr/lib/python3.13/site-packages/aiosmtplib/__init__.py /usr/lib/python3.13/site-packages/aiosmtplib/__main__.py /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__ /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/__init__.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/__init__.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/__main__.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/__main__.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/api.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/api.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/auth.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/auth.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/email.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/email.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/errors.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/errors.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/esmtp.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/esmtp.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/protocol.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/protocol.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/response.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/response.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/smtp.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/smtp.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/status.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/status.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/typing.cpython-313.opt-1.pyc /usr/lib/python3.13/site-packages/aiosmtplib/__pycache__/typing.cpython-313.pyc /usr/lib/python3.13/site-packages/aiosmtplib/api.py /usr/lib/python3.13/site-packages/aiosmtplib/auth.py /usr/lib/python3.13/site-packages/aiosmtplib/email.py /usr/lib/python3.13/site-packages/aiosmtplib/errors.py /usr/lib/python3.13/site-packages/aiosmtplib/esmtp.py /usr/lib/python3.13/site-packages/aiosmtplib/protocol.py /usr/lib/python3.13/site-packages/aiosmtplib/py.typed /usr/lib/python3.13/site-packages/aiosmtplib/response.py /usr/lib/python3.13/site-packages/aiosmtplib/smtp.py /usr/lib/python3.13/site-packages/aiosmtplib/status.py /usr/lib/python3.13/site-packages/aiosmtplib/typing.py /usr/share/doc/packages/python313-aiosmtplib /usr/share/doc/packages/python313-aiosmtplib/README.rst /usr/share/doc/packages/python313-aiosmtplib/bug-reporting.rst /usr/share/doc/packages/python313-aiosmtplib/changelog.rst /usr/share/doc/packages/python313-aiosmtplib/client.rst /usr/share/doc/packages/python313-aiosmtplib/encryption.rst /usr/share/doc/packages/python313-aiosmtplib/index.rst /usr/share/doc/packages/python313-aiosmtplib/oauth.rst /usr/share/doc/packages/python313-aiosmtplib/proxies.rst /usr/share/doc/packages/python313-aiosmtplib/quickstart.rst /usr/share/doc/packages/python313-aiosmtplib/reference.rst /usr/share/doc/packages/python313-aiosmtplib/timeouts.rst /usr/share/doc/packages/python313-aiosmtplib/trio.rst /usr/share/doc/packages/python313-aiosmtplib/usage.rst /usr/share/licenses/python313-aiosmtplib /usr/share/licenses/python313-aiosmtplib/LICENSE.txt
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Sep 17 23:56:17 2026