Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-jupyterlab for
openSUSE:Factory checked in at 2026-08-28 19:56:43
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-jupyterlab (Old)
and /work/SRC/openSUSE:Factory/.python-jupyterlab.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-jupyterlab"
Fri Aug 28 19:56:43 2026 rev:53 rq:1374385 version:4.5.10
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-jupyterlab/python-jupyterlab.changes
2026-06-25 17:14:20.831486832 +0200
+++
/work/SRC/openSUSE:Factory/.python-jupyterlab.new.1265/python-jupyterlab.changes
2026-08-28 19:59:15.169873628 +0200
@@ -1,0 +2,18 @@
+Fri Aug 28 10:00:04 UTC 2026 - Marius Grossu <[email protected]>
+
+- Update to 4.5.10:
+ ## Security patches
+ * CVE-2026-73415 GHSA-gx64-gj6p-pc4c (bsc#1274985): XSS in image
+ viewer when opening a malicious image in a new browser tab
+ * CVE-2026-73416 GHSA-89vp-jrxv-24w8 (bsc#1274986): extension
+ blocklist bypass via PyPI package-name canonicalization
+ * CVE-2026-73417 GHSA-pppj-hq3g-57pj (bsc#1274987): XSS via
+ crafted settings overrides.json file
+ * CVE-2026-73626 GHSA-r336-hqvq-mfjh (bsc#1274983): missing await
+ allowed allowlist/blocklist bypass in
+ PyPIExtensionManager.install()
+ * CVE-2026-73627 GHSA-fpf6-h6p9-9rjr (bsc#1274982): PluginManager
+ lock-rule enforcement bypass via direct /lab/api/plugins
+ requests
+
+-------------------------------------------------------------------
Old:
----
jupyterlab-4.5.9.tar.gz
New:
----
jupyterlab-4.5.10.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-jupyterlab.spec ++++++
--- /var/tmp/diff_new_pack.jUYl5q/_old 2026-08-28 19:59:17.407951875 +0200
+++ /var/tmp/diff_new_pack.jUYl5q/_new 2026-08-28 19:59:17.415952155 +0200
@@ -16,9 +16,9 @@
#
-%define distversion 4.5.9
+%define distversion 4.5.10
Name: python-jupyterlab
-Version: 4.5.9
+Version: 4.5.10
Release: 0
Summary: Environment for interactive and reproducible computing
License: BSD-3-Clause
++++++ jupyterlab-4.5.9.tar.gz -> jupyterlab-4.5.10.tar.gz ++++++
/work/SRC/openSUSE:Factory/python-jupyterlab/jupyterlab-4.5.9.tar.gz
/work/SRC/openSUSE:Factory/.python-jupyterlab.new.1265/jupyterlab-4.5.10.tar.gz
differ: char 26, line 1
