Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-jsonrpclib-pelix for
openSUSE:Factory checked in at 2026-08-22 21:35:42
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-jsonrpclib-pelix (Old)
and /work/SRC/openSUSE:Factory/.python-jsonrpclib-pelix.new.1258 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-jsonrpclib-pelix"
Sat Aug 22 21:35:42 2026 rev:9 rq:1373031 version:1.2.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-jsonrpclib-pelix/python-jsonrpclib-pelix.changes
2026-06-22 17:29:40.754247082 +0200
+++
/work/SRC/openSUSE:Factory/.python-jsonrpclib-pelix.new.1258/python-jsonrpclib-pelix.changes
2026-08-22 21:37:50.913876879 +0200
@@ -1,0 +2,13 @@
+Sat Aug 22 09:21:11 UTC 2026 - Dirk Müller <[email protected]>
+
+- update to 1.2.0:
+ * Class translation (`jsonclass`) no longer imports arbitrary
+ classes by default. A `__jsonclass__` payload could previously
+ make a server or client instantiate any importable class with
+ attacker-controlled arguments, when `use_jsonclass` was
+ enabled (the default) and no class registry was set.
+ * Dynamic import is now opt-in through the new
+ `Config.allow_dynamic_classes` flag (default `False`);
+ unregistered classes are refused with a `TranslationError`.
+
+-------------------------------------------------------------------
Old:
----
v1.1.0.tar.gz
New:
----
v1.2.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-jsonrpclib-pelix.spec ++++++
--- /var/tmp/diff_new_pack.YfOoG4/_old 2026-08-22 21:37:51.525898801 +0200
+++ /var/tmp/diff_new_pack.YfOoG4/_new 2026-08-22 21:37:51.527898872 +0200
@@ -17,7 +17,7 @@
Name: python-jsonrpclib-pelix
-Version: 1.1.0
+Version: 1.2.0
Release: 0
Summary: JSPN-RPC over HTTP Library for Pelix Remote Services
License: Apache-2.0
++++++ v1.1.0.tar.gz -> v1.2.0.tar.gz ++++++
++++ 5827 lines of diff (skipped)
