Accepting request 866403 from devel:languages:python

- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython

OBS-URL: https://build.opensuse.org/request/show/866403
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-PyYAML?expand=0&rev=24
This commit is contained in:
Dominique Leuenberger 2021-02-01 12:26:39 +00:00 committed by Git OBS Bridge
commit da19705780
4 changed files with 19 additions and 7 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:b8eac752c5e14d3eca0e6dd9199cd627518cb5ec06add0de9d32baeee6fe645d
size 269377

3
PyYAML-5.4.1.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:607774cbba28732bfa802b54baa7484215f530991055bb562efbed5b2f20a45e
size 175147

View File

@ -1,3 +1,14 @@
-------------------------------------------------------------------
Sun Jan 24 18:21:20 UTC 2021 - Dirk Müller <dmueller@suse.com>
- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
* Fix stub compat with older pyyaml versions that may unwittingly load it
* Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
* Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
* Fix memory leak in implicit resolver setup
* Fix py2 copy support for timezone objects
* Fix compatibility with Jython
-------------------------------------------------------------------
Thu Mar 19 07:23:23 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>

View File

@ -1,7 +1,7 @@
#
# spec file for package python-PyYAML
#
# Copyright (c) 2020 SUSE LLC
# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -19,13 +19,13 @@
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define oldpython python
Name: python-PyYAML
Version: 5.3.1
Version: 5.4.1
Release: 0
Summary: YAML parser and emitter for Python
License: MIT
URL: https://github.com/yaml/pyyaml
Source: https://files.pythonhosted.org/packages/source/P/PyYAML/PyYAML-%{version}.tar.gz
BuildRequires: %{python_module devel}
BuildRequires: %{python_module Cython}
BuildRequires: %{python_module setuptools}
BuildRequires: fdupes
BuildRequires: libyaml-devel
@ -56,6 +56,7 @@ configuration files to object serialization and persistance.
%build
export CFLAGS="%{optflags}"
export PYYAML_FORCE_LIBYAML=0 # we don't actually want to build the python lib
%python_build
# Fix example permissions.
find examples/ -type f | xargs chmod a-x
@ -75,7 +76,7 @@ ulimit -Sn 2048
%license LICENSE
%doc CHANGES README examples/
%{python_sitearch}/yaml
%{python_sitearch}/_yaml.*so
%{python_sitearch}/_yaml
%{python_sitearch}/PyYAML-%{version}-py%{python_version}.egg-info
%changelog