Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-onionshare for
openSUSE:Factory checked in at 2021-10-05 22:33:55
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-onionshare (Old)
and /work/SRC/openSUSE:Factory/.python-onionshare.new.2443 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-onionshare"
Tue Oct 5 22:33:55 2021 rev:9 rq:923203 version:2.4
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-onionshare/python-onionshare.changes
2021-08-24 10:55:54.708238384 +0200
+++
/work/SRC/openSUSE:Factory/.python-onionshare.new.2443/python-onionshare.changes
2021-10-05 22:34:24.214926870 +0200
@@ -1,0 +2,16 @@
+Tue Oct 5 10:26:20 UTC 2021 - Axel Braun <[email protected]>
+
+- source file fixed (download)
+
+-------------------------------------------------------------------
+Tue Oct 5 08:12:25 UTC 2021 - Gabriele Sonnu <[email protected]>
+
+- Update to 2.4:
+ * Major feature: Private keys (v3 onion client authentication) replaces
passwords and HTTP basic auth
+ * Updated Tor to 0.4.6.7 on all platforms
+ * Various bug fixes
+- CVE-2021-41867: Fixed remote information disclosure when using --chat
feature (boo#1191311)
+- CVE-2021-41868: Fixed remote unauthenticated file upload when using the
--receive functionality (boo#1191312)
+- Remove fix-compare-offset-naive-and-offset-aware-datetimes.patch because
accepted upstream
+
+-------------------------------------------------------------------
Old:
----
fix-compare-offset-naive-and-offset-aware-datetimes.patch
onionshare-2.3.3.tar.gz
New:
----
onionshare-2.4.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-onionshare.spec ++++++
--- /var/tmp/diff_new_pack.Yr3xg5/_old 2021-10-05 22:34:24.614927566 +0200
+++ /var/tmp/diff_new_pack.Yr3xg5/_new 2021-10-05 22:34:24.618927573 +0200
@@ -1,5 +1,5 @@
#
-# spec file
+# spec file for package python-onionshare
#
# Copyright (c) 2021 SUSE LLC
# Copyright (c) 2018-2021 Dr. Axel Braun
@@ -19,7 +19,7 @@
%define modname onionshare
Name: python-%{modname}
-Version: 2.3.3
+Version: 2.4
Release: 0
Summary: Self-hosting Tor Onion Service based file sharing
License: GPL-3.0-or-later
@@ -29,14 +29,13 @@
Source1: %{modname}.desktop
# PATCH-FIX-OPENSUSE skip test_large_download in gui tests
Patch0: 0001-adjust_tests.diff
-# PATCH-FIX-OPENSUSE gh#onionshare/onionshare#1398
-#
https://github.com/pallets/werkzeug/commit/265bad79ee60b94f509464dcaa827cfec5833bcc
-Patch1: fix-compare-offset-naive-and-offset-aware-datetimes.patch
+
BuildRequires: fdupes
BuildRequires: python-rpm-macros
BuildRequires: python3-Flask
BuildRequires: python3-Flask-HTTPAuth
BuildRequires: python3-Flask-SocketIO
+BuildRequires: python3-PyNaCl
BuildRequires: python3-PySocks
BuildRequires: python3-Unidecode
BuildRequires: python3-colorama
++++++ onionshare-2.3.3.tar.gz -> onionshare-2.4.tar.gz ++++++
++++ 30651 lines of diff (skipped)