forked from pool/python-weasyprint
Compare commits
4 Commits
CVE-2025-6
...
factory
| Author | SHA256 | Date | |
|---|---|---|---|
| 082bb9b185 | |||
| 6286569ce7 | |||
| d10e43d83a | |||
| de0b258201 |
@@ -1,3 +1,111 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jan 20 06:29:53 UTC 2026 - Daniel Garcia <daniel.garcia@suse.com>
|
||||||
|
|
||||||
|
- Update to 68.0 (bsc#1256936, CVE-2025-68616):
|
||||||
|
# Security
|
||||||
|
* Always use URL fetcher for HTTP redirects
|
||||||
|
# Python API
|
||||||
|
* default_url_fetcher() is deprecated, use the new URLFetcher class
|
||||||
|
instead, see URL Fetchers for more information about URL fetchers
|
||||||
|
* DocumentMetadata.generate_rdf_metadata is now a method that can be
|
||||||
|
overridden instead of a parameter, see Factur-X / ZUGFeRD
|
||||||
|
(Electronic Invoices) for examples to create e-invoices
|
||||||
|
# Features
|
||||||
|
* #2609, #2603, #351: Refactor URL fetcher API
|
||||||
|
* #2632: Support legacy 0 value for angles
|
||||||
|
* #2627: Add font-face support to SVG
|
||||||
|
* #2646, #2255: Add font shorthand support for SVG text elements
|
||||||
|
* #2590, #1749: Honor language-specific rules for text-transform
|
||||||
|
* #2645, #2613: Improve SVG and SVG emojis rendering
|
||||||
|
* #2658, #2583: Add CLI for Factur-X / ZUGFeRD e-invoices
|
||||||
|
# Bug fixes
|
||||||
|
* #2649: Refactor URL fetcher API
|
||||||
|
* #2643, #2628: Handle box-sizing: border-box in grid layout
|
||||||
|
* #2641, #1875: Process whitespace after checking all pending targets
|
||||||
|
* #2488, #2485: Preserve page groups during layout repagination
|
||||||
|
* #2642, #2631: Don’t use isolated transparency groups
|
||||||
|
* #2637: Fix repeating radial gradients rendering
|
||||||
|
* #2622: Fix validation of colors
|
||||||
|
* #2626: Share grid items rendering advancement between a box and its copies
|
||||||
|
* #2621: Correctly handle fallback values of attr()
|
||||||
|
* #2619: Fix SVG fonts
|
||||||
|
* #2629: Always define extra skip height that may be used after
|
||||||
|
* #2648: Fix numbers validation in font-feature-settings
|
||||||
|
* #2648: Fix keyword values for text-decoration-thickness
|
||||||
|
* #2661: Respect inline images when defining minimum table width
|
||||||
|
|
||||||
|
- 67.0:
|
||||||
|
# Features
|
||||||
|
* #2560, #640, #844, #1091, #2517: Support CMYK colors, PDF/X, color profiles and light-dark() function
|
||||||
|
* #2558, #1175: Support ::first-line, with financial support from Karte Technology
|
||||||
|
* #2552: Support CSS layers, with financial support from Code & Co.
|
||||||
|
* #2564, #2599, #2397: Allow page breaks in grid rows, with financial support from Ocean Recap
|
||||||
|
* #2568, #357: Support calc() and other mathematical functions
|
||||||
|
* #2575, #2574: Support PDF/A-1a, PDF/A-2a and PDF/A-3a
|
||||||
|
* #2611, #2573: Support PDF/A-4e and PDF/A-4f
|
||||||
|
* #2523: Display tofu for missing glyphs
|
||||||
|
* #2581: Add option to disable protocols in URL resolution
|
||||||
|
* #2570: Support rch, cap, rcap, rex, ic and ric font-relative units
|
||||||
|
* #2547, #2140: Support "only" keyword in media queries
|
||||||
|
# Bug fixes
|
||||||
|
* #2516, #1510: Fix rendering of first line of text with nested right float
|
||||||
|
* #2510, #1073, #2507: Avoid Pango crashes and font mismatches with @font-face rules referencing local fonts
|
||||||
|
* #2532, #2531: Use fonttools instancer instead of deprecated mutator API
|
||||||
|
* #2541: Fix syntax of functions
|
||||||
|
* #2543: Allow font-related units to access @font-face fonts
|
||||||
|
* #2525: Respect top margins and avoid overlapping footnotes for columns, with financial support from Code & Co.
|
||||||
|
* #2536: Remove Subtype key from font descriptor
|
||||||
|
* #2539: Fix min width for SVGs with intrinsic ratio but no intrinsic size
|
||||||
|
* #2537, #2533: Fix order of operators when drawing SVGs
|
||||||
|
* #2538: Don’t crash with nested unknown functions
|
||||||
|
* #2542: Don’t crash when lh and rlh are used for line height or font size
|
||||||
|
* #2540, #2528: Use locale encoding instead of filesystem encoding for font paths
|
||||||
|
* #2563, #2479: Don’t avoid float collisions for atomic flex items
|
||||||
|
* #2569: Don’t be case-sensitive for units
|
||||||
|
* #2567, #2566: Add x-default attribute for metadata description to be compliant with PDF/A
|
||||||
|
* #2586, #2571: Improve formatting contexts management
|
||||||
|
* #2600: Fix SVG image aspect ratio when only width or height is specified
|
||||||
|
* #2612, #2595: Clean block layout and fix corner cases
|
||||||
|
* #2522: Ignore preserveAspectRatio when SVG has no viewBox
|
||||||
|
* #2544: Allow to use a variable twice in a function
|
||||||
|
* #2555: Fix flex gap in right-to-left context
|
||||||
|
* #2591: Respect non-auto widths and fix padding of grid items
|
||||||
|
* #2601: Don’t crash when tagged tables are not displayed as tables
|
||||||
|
* #2607: Fix rendering of multiline textareas with PDF forms
|
||||||
|
* #2106: Force variable initialization to avoid crashes during column layout
|
||||||
|
* #2618, #2617: Fix rendering of relative grid and flex items
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Sep 12 14:38:56 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
|
||||||
|
|
||||||
|
- Update to 66.0
|
||||||
|
* #2475: Add support for 'lh' and 'rlh' units
|
||||||
|
* #2432, #2437: Report footnotes when text overflows because of orphans,
|
||||||
|
with financial support from Code & Co.
|
||||||
|
* #2256, #2466: Handle transform-origin in SVG
|
||||||
|
* #2445: Add parameter to have additional HTTP headers for url_fetcher
|
||||||
|
* #2471, #2506, #2500, #2460, #2363, #2470, #1872, #2153, #1838, #1837,
|
||||||
|
#1784, #1835, #2444, #2497, #2505, #2503, #1836, #2467: Improve PDF/UA
|
||||||
|
support, with financial support from NLnet
|
||||||
|
* #2425, #1557: Improve position of outside markers
|
||||||
|
* #2409, #2265: Draw circles instead of rectangles when drawing dotted borders
|
||||||
|
* #2416, #2270: Correctly split words for automatic hyphenation
|
||||||
|
* #2439, #2426: Don’t rely on URL protocols outside URL fetcher function
|
||||||
|
* #2433: Disable style for deprecated outline algorithm
|
||||||
|
* #2447, #2441, #2448: Improve min- and max-content calculation,
|
||||||
|
with financial support from Menutech
|
||||||
|
* #2454, #2442, #2449: Minor fixes for flex layout
|
||||||
|
* #2473, #2459: Include out-of-flow boxes in page layout progress,
|
||||||
|
with financial support from Pathfindr
|
||||||
|
* #2458: Replace deprecated warn logger function
|
||||||
|
* #2494, #1856: Fix bug with bottom margins in columns
|
||||||
|
* #2435: Make footnote calls inherit from footnotes
|
||||||
|
* #2484, #2456: Allow to avoid page breaks after table-row-group elements
|
||||||
|
* #2450: Draw background and borders for relative grid containers
|
||||||
|
* #2453: Don’t advance position_y for collapsed margins of discarded children
|
||||||
|
* #2493: Fix endless loop with CSS variables referencing each other
|
||||||
|
* #2502: Ignore bottom margin when calculating footnote overflow
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Tue May 20 12:11:26 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
|
Tue May 20 12:11:26 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
|
||||||
|
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
#
|
#
|
||||||
# spec file for package python-weasyprint
|
# spec file for package python-weasyprint
|
||||||
#
|
#
|
||||||
# Copyright (c) 2025 SUSE LLC
|
# Copyright (c) 2026 SUSE LLC and contributors
|
||||||
#
|
#
|
||||||
# All modifications and additions to the file contributed by third parties
|
# All modifications and additions to the file contributed by third parties
|
||||||
# remain the property of their copyright owners, unless otherwise agreed
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
@@ -21,15 +21,21 @@
|
|||||||
%global cssselect2_min_version 0.8.0
|
%global cssselect2_min_version 0.8.0
|
||||||
%global fonttools_min_version 4.0.0
|
%global fonttools_min_version 4.0.0
|
||||||
%global tinyhtml5_min_version 2.0.0
|
%global tinyhtml5_min_version 2.0.0
|
||||||
%global Pillow_min_version 9.1.0
|
%global Pillow_min_version 12.1.0
|
||||||
%global pypdf_min_version 0.11.0
|
%global pypdf_min_version 0.11.0
|
||||||
%global Pyphen_min_version 0.9.1
|
%global Pyphen_min_version 0.9.1
|
||||||
%global tinycss2_min_version 1.4.0
|
%global tinycss2_min_version 1.5.0
|
||||||
%global zopfli_min_version 0.1.4
|
%global zopfli_min_version 0.1.4
|
||||||
|
|
||||||
|
%if 0%{?suse_version} > 1500
|
||||||
|
%bcond_without libalternatives
|
||||||
|
%else
|
||||||
|
%bcond_with libalternatives
|
||||||
|
%endif
|
||||||
|
|
||||||
%{?sle15_python_module_pythons}
|
%{?sle15_python_module_pythons}
|
||||||
Name: python-weasyprint
|
Name: python-weasyprint
|
||||||
Version: 65.1
|
Version: 68.0
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: Python module to convert web documents to PDF
|
Summary: Python module to convert web documents to PDF
|
||||||
License: BSD-3-Clause
|
License: BSD-3-Clause
|
||||||
@@ -42,8 +48,13 @@ BuildRequires: %{python_module pip}
|
|||||||
BuildRequires: %{python_module setuptools >= 39.2.0}
|
BuildRequires: %{python_module setuptools >= 39.2.0}
|
||||||
BuildRequires: fdupes
|
BuildRequires: fdupes
|
||||||
BuildRequires: python-rpm-macros
|
BuildRequires: python-rpm-macros
|
||||||
|
%if %{with libalternatives}
|
||||||
|
Requires: alts
|
||||||
|
BuildRequires: alts
|
||||||
|
%else
|
||||||
Requires(post): update-alternatives
|
Requires(post): update-alternatives
|
||||||
Requires(postun): update-alternatives
|
Requires(postun): update-alternatives
|
||||||
|
%endif
|
||||||
Requires: libgobject-2_0-0
|
Requires: libgobject-2_0-0
|
||||||
Requires: pango
|
Requires: pango
|
||||||
Requires: python-Pillow >= %{Pillow_min_version}
|
Requires: python-Pillow >= %{Pillow_min_version}
|
||||||
@@ -51,7 +62,6 @@ Requires: python-Pyphen >= %{Pyphen_min_version}
|
|||||||
Requires: python-base >= 3.9
|
Requires: python-base >= 3.9
|
||||||
Requires: python-cffi >= %{cffi_min_version}
|
Requires: python-cffi >= %{cffi_min_version}
|
||||||
Requires: python-cssselect2 >= %{cssselect2_min_version}
|
Requires: python-cssselect2 >= %{cssselect2_min_version}
|
||||||
Requires: python-html5lib >= %{html5lib_min_version}
|
|
||||||
Requires: python-pydyf >= %{pypdf_min_version}
|
Requires: python-pydyf >= %{pypdf_min_version}
|
||||||
Requires: python-tinycss2 >= %{tinycss2_min_version}
|
Requires: python-tinycss2 >= %{tinycss2_min_version}
|
||||||
Requires: python-tinyhtml5 >= %{tinyhtml5_min_version}
|
Requires: python-tinyhtml5 >= %{tinyhtml5_min_version}
|
||||||
@@ -107,6 +117,10 @@ export PYTHONPATH=$PWD
|
|||||||
%check
|
%check
|
||||||
%pytest -k 'not test_linear_gradients and (5 or 12)' tests
|
%pytest -k 'not test_linear_gradients and (5 or 12)' tests
|
||||||
|
|
||||||
|
%pre
|
||||||
|
# removing old update-alternatives entries
|
||||||
|
%python_libalternatives_reset_alternative weasyprint
|
||||||
|
|
||||||
%post
|
%post
|
||||||
%python_install_alternative weasyprint
|
%python_install_alternative weasyprint
|
||||||
|
|
||||||
|
|||||||
@@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:120281bdbd42ffaa7d7e5cedbe3182a2cef36ea5ad97fe9f357e43be6a1e58ea
|
|
||||||
size 499028
|
|
||||||
3
weasyprint-68.0.tar.gz
Normal file
3
weasyprint-68.0.tar.gz
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:447f40898b747cb44ac31a5d493d512e7441fd56e13f63744c099383bbf9cda9
|
||||||
|
size 1541418
|
||||||
Reference in New Issue
Block a user