Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-distlib for openSUSE:Factory checked in at 2026-07-08 17:32:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-distlib (Old) and /work/SRC/openSUSE:Factory/.python-distlib.new.1982 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-distlib" Wed Jul 8 17:32:05 2026 rev:19 rq:1361591 version:0.4.3 Changes: -------- --- /work/SRC/openSUSE:Factory/python-distlib/python-distlib.changes 2025-09-11 14:39:23.683934137 +0200 +++ /work/SRC/openSUSE:Factory/.python-distlib.new.1982/python-distlib.changes 2026-07-08 17:32:08.172265540 +0200 @@ -1,0 +2,25 @@ +Tue Jun 23 11:28:29 UTC 2026 - Nico Krapp <[email protected]> + +- Update to 0.4.3 + * Removed too-restrictive check for escaping resources. +- Update to 0.4.2 + * Fix URL percent-encoding using space-padding instead of zero-padding. + * Harden decompression against malicious input. + * Use os.lstat in findall to correctly detect symlinked directories. + * Improve logic to incorporate newer metadata versions. + * Ensure that constructed resource paths don't escape the package. + * Fix #255: Update cache_from_source() for Python 3.15. + * Check during unarchiving that the destination directory isn't escaped via + symlinks. + * Improved performance of normalize_name using dual replace. + * Add checks that installed files don't escape the installation directory. + * Add checks when mounting extensions to ensure path containment. +- Update to 0.4.1 + * Fix path traversal bug in handling entry points which allowed escaping + the scripts directory. + * Fix #251: Change test function following a reorganization which happened + in the Python stdlib. +- drop py314.patch, no longer needed +- skip one test which depends on dictionary ordering + +------------------------------------------------------------------- Old: ---- distlib-0.4.0.tar.gz py314.patch New: ---- distlib-0.4.3.tar.gz ----------(Old B)---------- Old: in the Python stdlib. - drop py314.patch, no longer needed - skip one test which depends on dictionary ordering ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-distlib.spec ++++++ --- /var/tmp/diff_new_pack.44c3hb/_old 2026-07-08 17:32:09.784321582 +0200 +++ /var/tmp/diff_new_pack.44c3hb/_new 2026-07-08 17:32:09.788321722 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-distlib # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,14 +18,12 @@ %{?sle15_python_module_pythons} Name: python-distlib -Version: 0.4.0 +Version: 0.4.3 Release: 0 Summary: Distribution utilities License: Python-2.0 URL: https://github.com/pypa/distlib Source: https://files.pythonhosted.org/packages/source/d/distlib/distlib-%{version}.tar.gz -# PATCH-FIX-UPSTREAM https://github.com/pypa/distlib/commit/6286442857de9f734686d08f0e59ca8048ee357a Fix #251: Use more appropriate function in test. -Patch0: py314.patch BuildRequires: %{python_module pip} BuildRequires: %{python_module pytest} BuildRequires: %{python_module testsuite} @@ -57,7 +55,7 @@ %check export LANG=en_US.UTF-8 # This file and two tests need internet access -%pytest --ignore tests/test_locators.py -k 'not (test_search or test_package_data)' +%pytest --ignore tests/test_locators.py -k 'not (test_search or test_package_data or test_sequencer_basic)' %files %{python_files} %doc CHANGES.rst README.rst ++++++ distlib-0.4.0.tar.gz -> distlib-0.4.3.tar.gz ++++++ ++++ 1675 lines of diff (skipped)
