Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-rich-rst for openSUSE:Factory
checked in at 2026-09-28 13:47:43
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-rich-rst (Old)
and /work/SRC/openSUSE:Factory/.python-rich-rst.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-rich-rst"
Mon Sep 28 13:47:43 2026 rev:4 rq:1381108 version:2.2.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-rich-rst/python-rich-rst.changes
2026-07-06 12:34:02.462954279 +0200
+++
/work/SRC/openSUSE:Factory/.python-rich-rst.new.383539/python-rich-rst.changes
2026-09-28 13:47:45.575676808 +0200
@@ -1,0 +2,19 @@
+Mon Sep 28 08:00:46 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 2.2.0:
+ * Security: fix arbitrary local file read through
+ `.. literalinclude::` accepting absolute and `../` paths
+ (GHSA-qf6c-j2qx-p22r).
+ * Security: fix arbitrary local file read through `.. raw::`
+ with `:file:` or `:url:`; same fix covers `.. csv-table::`
+ and the `include` directive (GHSA-qx2q-xxw7-587f).
+ * Directives reading other files are now disabled by default;
+ pass `allow_file_access=True` (`--allow-file-access` on
+ the CLI) to enable them for trusted markup.
+ * Add `parsed-literal` support, sidebar subtitles, better
+ docinfo rendering and Python domain type/value titles.
+ * Many rendering fixes: admonition panels, stray blank lines,
+ headers, footers, math labels and the man page section.
+ * No runtime dependency changes.
+
+-------------------------------------------------------------------
Old:
----
rich_rst-2.1.0.tar.gz
New:
----
rich_rst-2.2.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-rich-rst.spec ++++++
--- /var/tmp/diff_new_pack.OxlZlk/_old 2026-09-28 13:47:46.540717147 +0200
+++ /var/tmp/diff_new_pack.OxlZlk/_new 2026-09-28 13:47:46.541717189 +0200
@@ -17,7 +17,7 @@
Name: python-rich-rst
-Version: 2.1.0
+Version: 2.2.0
Release: 0
Summary: A beautiful reStructuredText renderer for rich
License: MIT
++++++ rich_rst-2.1.0.tar.gz -> rich_rst-2.2.0.tar.gz ++++++
++++ 23864 lines of diff (skipped)
