17
0

- Update to 8.6.1 (bsc#1249347, CVE-2025-58367):

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-deepdiff?expand=0&rev=41
This commit is contained in:
2025-09-09 08:48:56 +00:00
committed by Git OBS Bridge
parent 5f818e7c54
commit fe581ba88e

View File

@@ -1,42 +1,7 @@
-------------------------------------------------------------------
Tue Sep 9 08:33:52 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
- Update to 8.6.1
* Patched security vulnerability in the Delta class which was
vulnerable to class pollution via its constructor, and when
combined with a gadget available in DeltaDiff itself, it could
lead to Denial of Service and Remote Code Execution (via insecure
Pickle deserialization).
8.6.0
* Added Colored View thanks to @mauvilsa
* Added support for applying deltas to NamedTuple thanks to @paulsc
* Fixed test_delta.py with Python 3.14 thanks to @Romain-Geissler-1A
* Added python property serialization to json
* Added ip address serialization
* Switched to UV from pip
* Added Claude.md
* Added uuid hashing thanks to @akshat62
* Added ignore_uuid_types flag to DeepDiff to avoid type reports
when comparing UUID and string.
* Added comprehensive type hints across the codebase (multiple
commits for better type safety)
* Added support for memoryview serialization
* Added support for bytes serialization (non-UTF8 compatible)
* Fixed bug where group_by with numbers would leak type info into
group path reports
* Fixed bug in _get_clean_to_keys_mapping without explicit
significant digits
* Added support for python dict key serialization
* Enhanced support for IP address serialization with safe module
imports
* Added development tooling improvements (pyright config, .envrc
example)
* Updated documentation and development instructions
-------------------------------------------------------------------
Tue Sep 9 07:26:58 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 8.6.1
- Update to 8.6.1 (bsc#1249347, CVE-2025-58367):
* Patched security vulnerability in the Delta class which was vulnerable
to class pollution via its constructor, and when combined with a gadget
available in DeltaDiff itself, it could lead to Denial of Service and