|
|
|
|
Changelog for python310-mitmproxy-10.2.2-1.2.noarch.rpm :
* Tue Feb 27 2024 Markéta Machová - Update to version 10.2.2: * The onboarding_port option has been removed. The onboarding app now responds to all requests for the hostname specified in onboarding_host. * connection.Client and connection.Server now accept keyword arguments only. This is a breaking change for custom addons that use these classes directly. * Add experimental support for HTTP/3 and QUIC. * ASGI/WSGI apps can now listen on all ports for a specific hostname. * Add replay.server.add command for adding flows to server replay buffer. * Remove string escaping in raw view. * mitmproxy now requires Python 3.10 or above. * Add support for reading and writing HAR files. * UDP streams are now backed by a new implementation in mitmproxy_rs. * ignore_hosts now waits for the entire HTTP headers if it suspects the connection to be HTTP. * Mon Jan 29 2024 Dirk Müller - switch to python311 build * Thu Dec 15 2022 Daniel Garcia - Skip broken tests in different architectures * Thu Dec 15 2022 Daniel Garcia - Remove fix-big-integer.patch- Update to version 9.0.1: - The precompiled binaries now ship with OpenSSL 3.0.7, which resolves CVE-2022-3602 and CVE-2022-3786. - Performance and stability improvements for WireGuard mode. (#5694, AATTmhils, AATTdecathorpe) - Fix a bug where the standalone Linux binaries would require libffi to be installed. (#5699, AATTmhils) - Hard exit when mitmproxy cannot write logs, fixes endless loop when parent process exits. (#4669, AATTPrinzhorn) - Fix a permission error affecting the Docker images. (#5700, AATTmhils)- 9.0.0 [#] Major Features - Add Raw UDP support. (#5414, AATTmeitinger) - Add WireGuard mode to enable transparent proxying via WireGuard. (#5562, AATTdecathorpe, AATTmhils) - Add DTLS support. (#5397, AATTkckeiks). - Add a quick help bar to mitmproxy. (#5381, #5652, AATTkckeiks, AATTmhils). [#] Deprecations - Deprecate add_log event hook. Users should use the builtin logging module instead. See the docs for details and upgrade instructions. (#5590, AATTmhils) - Deprecate mitmproxy.ctx.log in favor of Python\'s builtin logging module. See the docs for details and upgrade instructions. (#5590, AATTmhils) [#] Breaking Changes - The mode option is now a list of server specs instead of a single spec. The CLI interface is unaffected, but users may need to update their config.yaml. (#5393, AATTmhils) [#] Full Changelog - Mitmproxy binaries now ship with Python 3.11. (#5678, AATTmhils) - One mitmproxy instance can now spawn multiple proxy servers. (#5393, AATTmhils) - Add syntax highlighting to JSON and msgpack content view. (#5623, AATTSapiensAnatis) - Add MQTT content view. (#5588, AATTnikitastupin, AATTabbbe) - Setting connection_strategy to lazy now also disables early upstream connections to fetch TLS certificate details. (#5487, AATTmhils) - Fix order of event hooks on startup. (#5376, AATTmeitinger) - Include server information in bind/listen errors. (#5495, AATTmeitinger) - Include information about lazy connection_strategy in related errors. (#5465, AATTmeitinger, AATTmhils) - Fix tls_version_server_min and tls_version_server_max options. (#5546, AATTmhils) - Added Magisk module generation for Android onboarding. (#5547, AATTjorants) - Update Linux binary builder to Ubuntu 20.04, bumping the minimum glibc version to 2.31. (#5547, AATTjorants) - Add \"Save filtered\" button in mitmweb. (#5531, AATTrnbwdsh, AATTmhils) - Render application/prpc content as gRPC/Protocol Buffers (#5568, AATTselfisekai) - Mitmweb now supports content_view_lines_cutoff. (#5548, AATTsanlengjingvv) - Fix a mitmweb crash when scrolling down the flow list. (#5507, AATTLIU-shuyi) - Add HTTP/3 binary frame content view. (#5582, AATTmhils) - Fix mitmweb not properly opening a browser and being stuck on some Linux. (#5522, AATTPrinzhorn) - Fix race condition when updating mitmweb WebSocket connections that are closing. (#5405, #5686, AATTmhils) - Fix mitmweb crash when using filters. (#5658, #5661, AATTLIU-shuyi, AATTmhils) - Fix missing default port when starting a browser. (#5687, AATTrbdixon) - Add docs for transparent mode on Windows. (#5402, AATTstephenspol) * Fri Oct 07 2022 Daniel Garcia - Update to version 8.1.1: * Support specifying the local address for outgoing connections (#5364, AATTmeitinger) * Fix a bug where an excess empty chunk has been sent for chunked HEAD request. (#5372, AATTjixunmoe) * Drop pkg_resources dependency. (#5401, AATTPavelICS) * Fix huge (>65kb) http2 responses corrupted. (#5428, AATTdhabensky) * Remove overambitious assertions in the HTTP state machine, fix some error handling. (#5383, AATTmhils) * Use default_factory for parser_options. (#5474, AATTrathann)- mitmproxy 8.1.0 * DNS support (#5232, AATTmeitinger) * Mitmproxy now requires Python 3.9 or above. (#5233, AATTmhils) * Fix a memory leak in mitmdump where flows were kept in memory. (#4786, AATTmhils) * Replayed flows retain their current position in the flow list. (#5227, AATTmhils) * Periodically send HTTP/2 ping frames to keep connections alive. (#5046, AATTEndUser509) * Console Performance Improvements (#3427, AATTBkPHcgQL3V) * Warn users if server side event responses are received without streaming. (#4469, AATTmhils) * Add flatpak support to the browser addon (#5200, AATTpauloromeira) * Add example addon to dump contents to files based on a filter expression (#5190, AATTredraw) * Fix a bug where the wrong SNI is sent to an upstream HTTPS proxy (#5109, AATTmhils) * Make sure that mitmproxy displays error messages on startup. (#5225, AATTmhils) * Add example addon for domain fronting. (#5217, AATTrandomstuff) * Improve cut addon to better handle binary contents (#3965, AATTmhils) * Fix text truncation for full-width characters (#4278, AATTkjy00302) * Fix mitmweb export copy failed in non-secure domain. (#5264, AATTPactortester) * Add example script for manipulating cookies. (#5278, AATTWillahScott) * When opening an external viewer for message contents, mailcap files are not considered anymore. * This preempts the upcoming deprecation of Python\'s mailcap module. (#5297, AATTKORraNpl) * Fix hostname encoding for IDNA domains in upstream mode. (#5316, AATTnneonneo) * Fix hot reloading of contentviews. (#5319, AATTnneonneo) * Ignore HTTP/2 information responses instead of raising an error. (#5332, AATTmhils) * Improve performance and memory usage by reusing OpenSSL contexts. (#5339, AATTmhils) * Fix handling of multiple Cookie headers when proxying HTTP/2 to HTTP/1 (#5337, AATTrinsuki) * Improve http_manipulate_cookies.py example. (#5578, AATTinsilications)- Add fix-big-integer.patch to fix tests with modern python versions based on gh#mitmproxy/mitmproxyAATT780adbaf9b13 * Tue Mar 22 2022 Ferdinand Thiessen - Update to 8.0.0 * mitmweb improvements * Now renders TCP and WebSocket flows * Offers direct cURL/HTTPie/raw HTTP export * Added Experimental command bar * Added Async Event Hooks * Added event hooks to signal TLS handshake success and failure for client and server connections * Support proxy authentication for SOCKS v5 mode * CVE-2022-24766: Fix request smuggling vulnerability, boo#1197381 * Thu Jan 06 2022 Ben Greiner - Register obs hypothesis profile for slow test executions * Wed Dec 08 2021 Ferdinand Thiessen - Update to 7.0.4 * Compatibility with Python 3.10 * Supports proxying raw TCP connections * Support TCP connections that start with a server-side greeting * Support SMTP * Accept HTTP/2 requests from the client and forward them to an HTTP/1 server * Displays WebSocket messages also in a dedicated UI tab * Clients can now establish TLS with the proxy right from the start, which can add a significant layer of defense in public networks. * Removed pathoc and pathod, see https://github.com/mitmproxy/mitmproxy/issues/4273 * Wed Jan 27 2021 Markéta Machová - Update to 6.0.2 * Mitmproxy now requires Python 3.8 or above. * Deprecation of pathod and pathoc tools and modules. Future releases will not contain them! * SSLKEYLOGFILE now supports TLS 1.3 secrets * Tests: Replace asynctest with stdlib mock * Many smaller improvements and bugfixes- Drop unpin.patch and replace it with a sed script- Drop merged replace-asynctest.patch * Tue Aug 11 2020 Benjamin Greiner - Update to v5.2 * Add Filter message to mitmdump (AATTsarthak212) * Display TCP flows at flow list (AATTJessonsotoventura, AATTnikitastupin, AATTmhils) * Colorize JSON Contentview (AATTsarthak212) * Fix console crash when entering regex escape character in half-open string (AATTsarthak212) * Integrate contentviews to TCP flow details (AATTnikitastupin) * Added add-ons that enhance the performance of web application scanners (AATTanneborcherding) * Increase WebSocket message timestamp precision (AATTJustAnotherArchivist) * Fix HTTP reason value on HTTP/2 reponses (AATTrbdixon) * mitmweb: support wslview to open a web browser (AATTG-Rath) * Fix dev version detection with parent git repo (AATTJustAnotherArchivist) * Restructure examples and supported addons (AATTmhils) * Certificate generation: mark SAN as critical if no CN is set (AATTmhils) * Simplify Replacements with new ModifyBody addon (AATTmplattner) * Rename SetHeaders addon to ModifyHeaders (AATTmplattner) * mitmweb: \"New -> File\" menu option has been renamed to \"Clear All\" (AATTyogeshojha) * Add new MapRemote addon to rewrite URLs of requests (AATTmplattner) * Add support for HTTP Trailers to the HTTP/2 protocol (AATTsanlengjingvv and AATTKriechi) * Fix certificate runtime error during expire cleanup (AATTgorogoroumaru) * Fixed the DNS Rebind Protection for secure support of IPv6 addresses (AATTtunnelpr0) * WebSockets: match the HTTP-WebSocket flow for the ~websocket filter (AATTKriechi) * Fix deadlock caused by the \"replay.client.stop\" command (AATTgorogoroumaru) * Add new MapLocal addon to serve local files instead of remote resources (AATTmplattner and AATTmhils) * Add minimal TCP interception and modification (AATTnikitastupin) * Add new CheckSSLPinning addon to check SSL-Pinning on client (AATTsu-vikas) * Add a JSON dump script: write data into a file or send to an endpoint as JSON (AATTemedvedev) * Fix console output formatting (AATTsarthak212) * Add example for proxy authentication using selenium (AATTanneborcherding and AATTweichweich)- refresh unpin.patch- replace unmaintained asynctest by native python 3.8 unittest calls * replace-asynctest.patch * gh#mitmproxy/mitmproxy#4020
|
|
|