Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-whitenoise for
openSUSE:Factory checked in at 2026-03-24 18:48:55
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-whitenoise (Old)
and /work/SRC/openSUSE:Factory/.python-whitenoise.new.8177 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-whitenoise"
Tue Mar 24 18:48:55 2026 rev:16 rq:1342122 version:6.12.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-whitenoise/python-whitenoise.changes
2025-09-25 18:47:59.000921523 +0200
+++
/work/SRC/openSUSE:Factory/.python-whitenoise.new.8177/python-whitenoise.changes
2026-03-24 18:49:49.264813324 +0100
@@ -1,0 +2,11 @@
+Mon Mar 23 22:49:20 UTC 2026 - Dirk Müller <[email protected]>
+
+- update to 6.12.0:
+ * Drop Python 3.9 support.
+ * Fix potential unauthorised file access vulnerability in
+ "autorefesh" mode. See PR #684 for details, and a reminder
+ that autorefresh mode has always been documented as
+ unsuitable for production use. Thanks Seth Larson for
+ reporting.
+
+-------------------------------------------------------------------
Old:
----
whitenoise-6.11.0.tar.gz
New:
----
whitenoise-6.12.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-whitenoise.spec ++++++
--- /var/tmp/diff_new_pack.VEQh0z/_old 2026-03-24 18:49:50.352858218 +0100
+++ /var/tmp/diff_new_pack.VEQh0z/_new 2026-03-24 18:49:50.352858218 +0100
@@ -1,7 +1,7 @@
#
# spec file for package python-whitenoise
#
-# Copyright (c) 2025 SUSE LLC and contributors
+# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-whitenoise
-Version: 6.11.0
+Version: 6.12.0
Release: 0
Summary: Static file serving for WSGI applications
License: MIT
++++++ whitenoise-6.11.0.tar.gz -> whitenoise-6.12.0.tar.gz ++++++
++++ 1935 lines of diff (skipped)