- Update to 8.6.1 (bsc#1249347, CVE-2025-58367):
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-deepdiff?expand=0&rev=41
This commit is contained in:
@@ -1,42 +1,7 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 9 08:33:52 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
|
||||
|
||||
- Update to 8.6.1
|
||||
* Patched security vulnerability in the Delta class which was
|
||||
vulnerable to class pollution via its constructor, and when
|
||||
combined with a gadget available in DeltaDiff itself, it could
|
||||
lead to Denial of Service and Remote Code Execution (via insecure
|
||||
Pickle deserialization).
|
||||
8.6.0
|
||||
* Added Colored View thanks to @mauvilsa
|
||||
* Added support for applying deltas to NamedTuple thanks to @paulsc
|
||||
* Fixed test_delta.py with Python 3.14 thanks to @Romain-Geissler-1A
|
||||
* Added python property serialization to json
|
||||
* Added ip address serialization
|
||||
* Switched to UV from pip
|
||||
* Added Claude.md
|
||||
* Added uuid hashing thanks to @akshat62
|
||||
* Added ignore_uuid_types flag to DeepDiff to avoid type reports
|
||||
when comparing UUID and string.
|
||||
* Added comprehensive type hints across the codebase (multiple
|
||||
commits for better type safety)
|
||||
* Added support for memoryview serialization
|
||||
* Added support for bytes serialization (non-UTF8 compatible)
|
||||
* Fixed bug where group_by with numbers would leak type info into
|
||||
group path reports
|
||||
* Fixed bug in _get_clean_to_keys_mapping without explicit
|
||||
significant digits
|
||||
* Added support for python dict key serialization
|
||||
* Enhanced support for IP address serialization with safe module
|
||||
imports
|
||||
* Added development tooling improvements (pyright config, .envrc
|
||||
example)
|
||||
* Updated documentation and development instructions
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 9 07:26:58 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
|
||||
|
||||
- Update to 8.6.1
|
||||
- Update to 8.6.1 (bsc#1249347, CVE-2025-58367):
|
||||
* Patched security vulnerability in the Delta class which was vulnerable
|
||||
to class pollution via its constructor, and when combined with a gadget
|
||||
available in DeltaDiff itself, it could lead to Denial of Service and
|
||||
|
||||
Reference in New Issue
Block a user