pool/python-asteval
SHA256
17
0
Fork 2
Code Issues Pull Requests Activity

Compare commits

base: pool:factory
Branches Tags
pool:factory python:main
..
compare: python:main
Branches Tags
python:main pool:factory

9 Commits
factory ... main

Author SHA256 Message Date
Ana Guerrero
c6fa0184b5 Accepting request 1240582 from devel:languages:python 
- Update to 1.0.6
  * drop testing and support for Python3.8, add Python 3.13,
    change document to reflect this.
  * implement safe_getattr and safe_format functions; fix bugs
    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage (bsc#1236405,
    CVE-2025-24359)
  * make all procedure attributes private to curb access to AST
    nodes, which can be exploited
  * improvements to error messages, including use ast functions
    to construct better error messages
  * remove import of numpy.linalg, as documented
  * update doc description for security advisory

OBS-URL: https://build.opensuse.org/request/show/1240582
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-asteval?expand=0&rev=21
 2025-01-27 19:57:33 +00:00
Matej Cepl
2a11a765e3 Add information about the fixed CVE. 
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=43
 2025-01-27 15:21:08 +00:00
Matej Cepl
8760b4335a Accepting request 1240526 from home:glaubitz:branches:devel:languages:python 
- Update to 1.0.6
  * drop testing and support for Python3.8, add Python 3.13,
    change document to reflect this.
  * implement safe_getattr and safe_format functions; fix bugs
    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
  * make all procedure attributes private to curb access to AST
    nodes, which can be exploited
  * improvements to error messages, including use ast functions
    to construct better error messages
  * remove import of numpy.linalg, as documented
  * update doc description for security advisory

OBS-URL: https://build.opensuse.org/request/show/1240526
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=42
 2025-01-27 13:48:13 +00:00
Ana Guerrero
c14e972703 Accepting request 1206742 from devel:languages:python 
- update to 1.0.5:
  * more work on handling errors, including fixing #133 and
    adding more comprehensive tests for #129 and #132
- update to 1.0.4:
  * fix error handling that might result in null exception
- update to 1.0.3:
  * functions ("Procedures") defined within asteval have a `
    _signature()` method, now use in repr
  * add support for deleting subscript
  * nested symbol tables now have a  Group() function
  * update coverage config
  * cleanups of exception handling :  errors must now have an
    exception
  * several related fixes to suppress repeated exceptions: see GH
    #132 and #129
  * make non-boolean return values from comparison operators
    behave like Python - not immediately testing as bool

OBS-URL: https://build.opensuse.org/request/show/1206742
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-asteval?expand=0&rev=20
 2024-10-10 20:15:05 +00:00
Dirk Mueller
4e9e57ba76 - update to 1.0.5: 
* more work on handling errors, including fixing #133 and
    adding more comprehensive tests for #129 and #132
- update to 1.0.4:
  * fix error handling that might result in null exception
- update to 1.0.3:
  * functions ("Procedures") defined within asteval have a `
    _signature()` method, now use in repr
  * add support for deleting subscript
  * nested symbol tables now have a  Group() function
  * update coverage config
  * cleanups of exception handling :  errors must now have an
    exception
  * several related fixes to suppress repeated exceptions: see GH
    #132 and #129
  * make non-boolean return values from comparison operators
    behave like Python - not immediately testing as bool

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=40
 2024-10-10 15:41:57 +00:00
Dominique Leuenberger
43c1a46660 Accepting request 1192791 from devel:languages:python 
- update to 1.0.2:
  * fix NameError handling in expression code
  * make exception messages more Python-like
- update to 1.0.1:
  * security fixes, based on audit by Andrew Effenhauser, Ayman
    Hammad, and Daniel Crowley, IBM X-Force Security Research
    division
  * remove numpy modules polynomial, fft, linalg by default for
    security concerns
  * disallow string.format(), improve security of f-string
    evaluation

OBS-URL: https://build.opensuse.org/request/show/1192791
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-asteval?expand=0&rev=19
 2024-08-09 14:16:02 +00:00
Dirk Mueller
34dd94b27d - update to 1.0.2: 
* fix NameError handling in expression code
  * make exception messages more Python-like
- update to 1.0.1:
  * security fixes, based on audit by Andrew Effenhauser, Ayman
    Hammad, and Daniel Crowley, IBM X-Force Security Research
    division
  * remove numpy modules polynomial, fft, linalg by default for
    security concerns
  * disallow string.format(), improve security of f-string
    evaluation

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=38
 2024-08-09 06:58:52 +00:00
Ana Guerrero
c76c8fc9a2 Accepting request 1184940 from devel:languages:python 
- update to 1.0.0:
  * fix (again) nested list comprehension (Issues #127 and #126).
  * add more testing of multiple list comprehensions.
  * more complete support for Numpy 2, and removal of many Numpy
    symbols that have been long deprecated.
  * remove AST nodes deprecated in Python 3.8.
  * clean up build files and outdated tests.
  * fixes to codecov configuration.
  * update docs.

OBS-URL: https://build.opensuse.org/request/show/1184940
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-asteval?expand=0&rev=18
 2024-07-03 18:30:41 +00:00
Dirk Mueller
3778f16399 - update to 1.0.0: 
* fix (again) nested list comprehension (Issues #127 and #126).
  * add more testing of multiple list comprehensions.
  * more complete support for Numpy 2, and removal of many Numpy
    symbols that have been long deprecated.
  * remove AST nodes deprecated in Python 3.8.
  * clean up build files and outdated tests.
  * fixes to codecov configuration.
  * update docs.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=36
 2024-07-02 20:14:36 +00:00
4 changed files with 5 additions and 34 deletions
Expand all files Collapse all files

3
asteval-1.0.6.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1aa8e7304b2e171a90d64dd269b648cacac4e46fe5de54ac0db24776c0c4a19f
size 52079

3
asteval-1.0.8.tar.gz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7175134331726df0e1569f4ab5fa59266192cf1b365db0ff463c978842075cbb
size 53989

29
python-asteval.changes
View File

@@ -1,32 +1,3 @@
-------------------------------------------------------------------
Thu Jan 22 08:37:51 UTC 2026 - Dirk Müller <dmueller@suse.com>
- update to 1.0.8:
* fix bug (#146) so that `return` from a Procedure does not
interrupt the calling code block
* remove numpy.memmap from default methods
* add discussion of numpy functions/objects that can open files
* add support and tests for `lambda` expressions
* add default permissions to github actions
* update README, doc, remove cruft
-------------------------------------------------------------------
Thu Nov 13 14:25:13 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 1.0.7
* return in while, for, and with blocks in functions properly signal
an immediate exit of the function. (fixes #141)
* fix augassign to retain line numbers for exceptions properly. (#140)
* make sure that "unsafe_modules" should not be accessed even if imported
and exposed by other modules
* cleanup unused nodes
* tweaks and fixes to docs
* drop testing with Python 3.9
* add testing for Python 3.14
* update pyproject.toml from the endless churn from PyPA, to move the
location and formatting for the LICENSE, to continue compliance with
the endless churn from PyPA.
-------------------------------------------------------------------
Mon Jan 27 12:42:41 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>

4
python-asteval.spec
View File

@@ -1,7 +1,7 @@
#
# spec file for package python-asteval
#
# Copyright (c) 2026 SUSE LLC and contributors
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-asteval
Version: 1.0.8
Version: 1.0.6
Release: 0
Summary: Safe, minimalistic evaluator of python expression using ast module
License: MIT