Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-joserfc for openSUSE:Factory checked in at 2026-03-05 17:29:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-joserfc (Old) and /work/SRC/openSUSE:Factory/.python-joserfc.new.561 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-joserfc" Thu Mar 5 17:29:53 2026 rev:7 rq:1336670 version:1.6.3 Changes: -------- --- /work/SRC/openSUSE:Factory/python-joserfc/python-joserfc.changes 2025-06-13 18:47:16.299307935 +0200 +++ /work/SRC/openSUSE:Factory/.python-joserfc.new.561/python-joserfc.changes 2026-03-05 17:32:03.464709363 +0100 @@ -1,0 +2,31 @@ +Wed Mar 4 14:44:25 UTC 2026 - Nico Krapp <[email protected]> + +- Update to 1.6.3 (fixes CVE-2026-27932, bsc#1259154) + * jwe: Set max value for p2c +- Update to 1.6.2 + * Class does not need to inherit object + * jwe: Move size limit to DeflateZipModel + * jwe: Auto add kid when add_recipient + * jwe: Auto add kid to recipient when kid exists +- Update to 1.6.1 + * Remove duplicate code + * Improve base key method definition + * Update for type hints + * jwt: Remove InvalidTokenError, ExpiredTokenError based on ClaimError +- Update to 1.6.0 + * Filter_algorithms names parameter default to all algs + * Pick_random_key algorithm parameter is optional + * Filter_algorithms supports KeySet objects + * jwk: Add a derive_key method for OKPKey + * jwk: Add derive_key method for ECKey + * Remove backend parameter, it is deprecated + * jwa: Improve RFC9864 check key logic + * jwk: Improve OKPKey implementation + * jwk: Allow import key from cryptography native key types + * jwk: Raise InvalidKeyCurveError when generate ECKey with invalid crv + * jwk: Improve generate_private_key on binding class + * jwk: Remove useless properties on OKPKey + * jws: Use JWSRegistry.guess_algorithm to replace JWSRegistry.guess_alg + * jwt: Make BaseClaimsRegistry.essential_keys a property. + +------------------------------------------------------------------- Old: ---- joserfc-1.1.0.tar.gz New: ---- joserfc-1.6.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-joserfc.spec ++++++ --- /var/tmp/diff_new_pack.f9Y5Xv/_old 2026-03-05 17:32:04.348746131 +0100 +++ /var/tmp/diff_new_pack.f9Y5Xv/_new 2026-03-05 17:32:04.352746297 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-joserfc # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-joserfc -Version: 1.1.0 +Version: 1.6.3 Release: 0 Summary: The ultimate Python library for JOSE RFCs License: BSD-3-Clause ++++++ joserfc-1.1.0.tar.gz -> joserfc-1.6.3.tar.gz ++++++ ++++ 22085 lines of diff (skipped)
