SLFO-pool/python-Jinja2
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync from SUSE:SLFO:Main python-Jinja2 revision 51fcc694bc22fd2fd20acd6b67cd74e7

Browse Source
This commit is contained in:
Adrian Schröter 2024-09-13 16:17:16 +02:00
parent 15972f3741
commit 5f30de9be5
4 changed files with 53 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
Jinja2-3.1.2.tar.gz (Stored with Git LFS)
View File

Binary file not shown.

BIN
jinja2-3.1.4.tar.gz (Stored with Git LFS) Normal file
View File

Binary file not shown.

42
python-Jinja2.changes
View File

@ -1,3 +1,28 @@
-------------------------------------------------------------------
Mon May 6 18:10:40 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 3.1.4 (bsc#1223980, CVE-2024-34064):
* The xmlattr filter does not allow keys with / solidus, >
greater-than sign, or = equals sign, in addition to disallowing
spaces. Regardless of any validation done by Jinja, user input
should never be used as keys to this filter, or must be separately
validated first.
-------------------------------------------------------------------
Mon Jan 29 10:10:29 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
- Disable broken test with latest version of MarkupSafe (2.1.4)
(gh#pallets/jinja#1930, gh#pallets/markupsafe#417)
-------------------------------------------------------------------
Fri Jan 12 09:35:16 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 3.1.3 (bsc#1218722, CVE-2024-22195):
* Fix compiler error when checking if required blocks in parent
templates are xmlattr filter does not allow keys with spaces.
* Make error messages stemming from invalid nesting of {% trans
%} blocks more helpful. :pr:`1916`
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Apr 21 12:20:44 UTC 2023 - Dirk Müller <dmueller@suse.com> Fri Apr 21 12:20:44 UTC 2023 - Dirk Müller <dmueller@suse.com>
@ -131,10 +156,11 @@ Mon May 31 06:38:35 UTC 2021 - Adrian Schröter <adrian@suse.de>
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Feb 9 15:42:40 UTC 2021 - Alexandros Toptsoglou <atoptsoglou@suse.com> Tue Feb 9 15:42:40 UTC 2021 - Alexandros Toptsoglou <atoptsoglou@suse.com>
- update to 2.11.3 - update to 2.11.3
* Improve the speed of the urlize filter by reducing regex backtracking. * Improve the speed of the urlize filter by reducing regex backtracking.
Email matching requires a word character at the start of the domain part Email matching requires a word character at the start of the domain part
and only word characters in the TLD (CVE-2020-28493 bsc#1181944). and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists
------------------------------------------------------------------- -------------------------------------------------------------------
Mon May 4 09:35:51 UTC 2020 - Johannes Grassler <johannes.grassler@suse.com> Mon May 4 09:35:51 UTC 2020 - Johannes Grassler <johannes.grassler@suse.com>
@ -166,7 +192,7 @@ Mon May 4 09:35:51 UTC 2020 - Johannes Grassler <johannes.grassler@suse.com>
intermediate strings during rendering. This prevents early intermediate strings during rendering. This prevents early
evaluation which could change the value of an expression. evaluation which could change the value of an expression.
:issue:1186 :issue:1186
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Apr 8 11:59:35 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com> Wed Apr 8 11:59:35 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
@ -180,7 +206,7 @@ Fri Feb 21 18:56:05 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Feb 18 17:26:13 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com> Tue Feb 18 17:26:13 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>
- update to 2.11.1 - update to 2.11.1
* Fix a bug that prevented looking up a key after an attribute * Fix a bug that prevented looking up a key after an attribute
({{ data.items[1:] }}) in an async template ({{ data.items[1:] }}) in an async template
@ -426,7 +452,7 @@ Fri Aug 15 12:29:35 UTC 2014 - mcihar@suse.cz
Tue Jul 15 10:41:00 UTC 2014 - toddrme2178@gmail.com Tue Jul 15 10:41:00 UTC 2014 - toddrme2178@gmail.com
- Update to 2.7.3 (bnc#858239, CVE-2014-0012) - Update to 2.7.3 (bnc#858239, CVE-2014-0012)
- Security issue: Corrected the security fix for the cache folder. - Security issue: Corrected the security fix for the cache folder.
This fix was provided by RedHat. This fix was provided by RedHat.
------------------------------------------------------------------- -------------------------------------------------------------------
@ -437,7 +463,7 @@ Thu May 8 21:21:45 UTC 2014 - hpj@urpla.net
------------------------------------------------------------------- -------------------------------------------------------------------
Sat Apr 26 19:38:39 UTC 2014 - dmueller@suse.com Sat Apr 26 19:38:39 UTC 2014 - dmueller@suse.com
- avoid rebuildcycle with vim - avoid rebuildcycle with vim
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Jan 13 13:18:53 UTC 2014 - dmueller@suse.com Mon Jan 13 13:18:53 UTC 2014 - dmueller@suse.com
@ -521,7 +547,7 @@ Mon Apr 23 12:00:49 UTC 2012 - toddrme2178@gmail.com
- Add python 3 package - Add python 3 package
- Simplify vim plugin packaging - Simplify vim plugin packaging
- Add suggests for vim and emacs in their respective - Add suggests for vim and emacs in their respective
packages packages
- Removed test for obsolete openSUSE version - Removed test for obsolete openSUSE version

29
python-Jinja2.spec
View File

@ -1,7 +1,7 @@
# #
# spec file for package python-Jinja2 # spec file for package python-Jinja2
# #
# Copyright (c) 2023 SUSE LLC # Copyright (c) 2024 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@ -16,7 +16,6 @@
# #
%define skip_python2 1
%ifarch %{ix86} armv7l %ifarch %{ix86} armv7l
%bcond_with test %bcond_with test
%else %else
@ -24,16 +23,18 @@
%endif %endif
%{?sle15_python_module_pythons} %{?sle15_python_module_pythons}
Name: python-Jinja2 Name: python-Jinja2
Version: 3.1.2 Version: 3.1.4
Release: 0 Release: 0
Summary: A template engine written in pure Python Summary: A template engine written in pure Python
License: BSD-3-Clause License: BSD-3-Clause
URL: https://jinja.palletsprojects.com URL: https://jinja.palletsprojects.com
Source: https://files.pythonhosted.org/packages/source/J/Jinja2/Jinja2-%{version}.tar.gz Source: https://files.pythonhosted.org/packages/source/J/Jinja2/jinja2-%{version}.tar.gz
BuildRequires: %{python_module MarkupSafe >= 0.23} BuildRequires: %{python_module MarkupSafe >= 0.23}
BuildRequires: %{python_module base >= 3.7} BuildRequires: %{python_module base >= 3.7}
BuildRequires: %{python_module flit-core}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module pytest} BuildRequires: %{python_module pytest}
BuildRequires: %{python_module setuptools} BuildRequires: %{python_module wheel}
BuildRequires: dos2unix BuildRequires: dos2unix
BuildRequires: fdupes BuildRequires: fdupes
BuildRequires: python-rpm-macros BuildRequires: python-rpm-macros
@ -51,25 +52,27 @@ inspired non-XML syntax but supports inline expressions and an optional
sandboxed environment. sandboxed environment.
%prep %prep
%setup -q -n Jinja2-%{version} %setup -q -n jinja2-%{version}
dos2unix LICENSE.rst # Fix wrong EOL encoding
%build %build
%python_build %pyproject_wheel
%install %install
%python_install %pyproject_install
%python_expand %fdupes %{buildroot}%{$python_sitelib} %python_expand %fdupes %{buildroot}%{$python_sitelib}
%check %check
%if %{with test} %if %{with test}
%pytest -W ignore:'Support for nose tests is deprecated' # Test broken with latest version of MarkupSafe (2.1.4)
# gh#pallets/jinja#1930, gh#pallets/markupsafe#417
donttest="test_striptags"
%pytest -W ignore:'Support for nose tests is deprecated' -k "not ($donttest)"
%endif %endif
%files %{python_files} %files %{python_files}
%license LICENSE.rst %license LICENSE.txt
%doc README.rst CHANGES.rst artwork examples %doc README.md docs/changes.rst docs/examples
%{python_sitelib}/jinja2 %{python_sitelib}/jinja2
%{python_sitelib}/Jinja2-%{version}-py%{python_version}.egg-info %{python_sitelib}/jinja2-%{version}.dist-info
%changelog %changelog