Hello community,
here is the log from the commit of package python-jupyter_notebook for
openSUSE:Factory checked in at 2018-11-26 10:31:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-jupyter_notebook (Old)
and /work/SRC/openSUSE:Factory/.python-jupyter_notebook.new.19453 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-jupyter_notebook"
Mon Nov 26 10:31:53 2018 rev:15 rq:651558 version:5.7.2
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-jupyter_notebook/python-jupyter_notebook.changes
2018-10-01 08:19:07.001902725 +0200
+++
/work/SRC/openSUSE:Factory/.python-jupyter_notebook.new.19453/python-jupyter_notebook.changes
2018-11-26 10:33:36.656795656 +0100
@@ -1,0 +2,12 @@
+Sat Nov 24 20:05:29 UTC 2018 - Arun Persaud <[email protected]>
+
+- update to version 5.7.2:
+ * 5.7.2 contains a security fix preventing malicious directory names
+ from being able to execute javascript. CVE request pending.
+
+- changes from version 5.7.1:
+ * 5.7.1 contains a security fix preventing nbconvert endpoints from
+ executing javascript with access to the server API. CVE request
+ pending.
+
+-------------------------------------------------------------------
Old:
----
notebook-5.7.0.tar.gz
New:
----
notebook-5.7.2.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-jupyter_notebook.spec ++++++
--- /var/tmp/diff_new_pack.HaHH8R/_old 2018-11-26 10:33:40.468791192 +0100
+++ /var/tmp/diff_new_pack.HaHH8R/_new 2018-11-26 10:33:40.472791187 +0100
@@ -12,18 +12,18 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
Name: python-jupyter_notebook
-Version: 5.7.0
+Version: 5.7.2
Release: 0
Summary: Jupyter Notebook
License: BSD-3-Clause
Group: Development/Languages/Python
-Url: https://github.com/jupyter/notebook
+URL: https://github.com/jupyter/notebook
Source0:
https://files.pythonhosted.org/packages/source/n/notebook/notebook-%{version}.tar.gz
Source1:
https://media.readthedocs.org/pdf/jupyter-notebook/%{version}/jupyter-notebook.pdf
Source2:
https://media.readthedocs.org/htmlzip/jupyter-notebook/%{version}/jupyter-notebook.zip
@@ -33,6 +33,21 @@
BuildRequires: hicolor-icon-theme
BuildRequires: python-rpm-macros
BuildRequires: unzip
+Requires: python-Jinja2
+Requires: python-Send2Trash
+Requires: python-ipython_genutils
+Requires: python-jupyter_client >= 5.2.0
+Requires: python-jupyter_core
+Requires: python-jupyter_ipykernel
+Requires: python-jupyter_nbconvert
+Requires: python-jupyter_nbformat
+Requires: python-prometheus_client
+Requires: python-terminado >= 0.3.3
+Requires: python-tornado >= 4
+Requires: python-traitlets >= 4.2.1
+Recommends: python-jupyter_ipywidgets
+Suggests: %{name}-latex
+BuildArch: noarch
# SECTION test requirements
BuildRequires: %{python_module Jinja2}
BuildRequires: %{python_module Send2Trash}
@@ -55,25 +70,9 @@
BuildRequires: python-ipaddress
BuildRequires: python-mock
# /SECTION
-Requires: python-Jinja2
-Requires: python-Send2Trash
-Requires: python-ipython_genutils
-Requires: python-jupyter_client >= 5.2.0
-Requires: python-jupyter_core
-Requires: python-jupyter_ipykernel
-Requires: python-jupyter_nbconvert
-Requires: python-jupyter_nbformat
-Requires: python-prometheus_client
-Requires: python-terminado >= 0.3.3
-Requires: python-tornado >= 4
-Requires: python-traitlets >= 4.2.1
%ifpython2
Requires: python-ipaddress
%endif
-Recommends: python-jupyter_ipywidgets
-Suggests: %{name}-latex
-BuildArch: noarch
-
%python_subpackages
%description
++++++ jupyter-notebook.pdf ++++++
(binary differes)
++++++ jupyter-notebook.zip ++++++
Binary files /var/tmp/diff_new_pack.HaHH8R/_old and
/var/tmp/diff_new_pack.HaHH8R/_new differ
++++++ notebook-5.7.0.tar.gz -> notebook-5.7.2.tar.gz ++++++
/work/SRC/openSUSE:Factory/python-jupyter_notebook/notebook-5.7.0.tar.gz
/work/SRC/openSUSE:Factory/.python-jupyter_notebook.new.19453/notebook-5.7.2.tar.gz
differ: char 5, line 1