pool/python-weasyprint
SHA256
17
0
Fork 3
Code Issues Pull Requests 1 Activity

Add CVE-2025-68616.patch to fix (SSRF) #1

Manually merged
dgarcia merged 1 commits from dgarcia/python-weasyprint:CVE-2025-68616 into leap-16.0 2026-01-21 00:32:20 +01:00
Conversation 9 Commits 1 Files Changed 3 +95
dgarcia commented 2026-01-20 10:16:30 +01:00
Contributor
Copy Link

Add CVE-2025-68616.patch to fix server-side request forgery (SSRF)
vulnerability in default fetcher.

(bsc#1256936, CVE-2025-68616)

Add CVE-2025-68616.patch to fix server-side request forgery (SSRF) vulnerability in default fetcher. (bsc#1256936, CVE-2025-68616)
dgarcia added 1 commit 2026-01-20 10:16:30 +01:00
Add CVE-2025-68616.patch to fix (SSRF) 6a88841ded 
Add CVE-2025-68616.patch to fix server-side request forgery (SSRF)
vulnerability in default fetcher.

(bsc#1256936, CVE-2025-68616)
autogits_workflow_pr_bot requested review from legaldb 2026-01-20 10:16:55 +01:00
autogits_workflow_pr_bot requested review from maintenance-release-review 2026-01-20 10:16:55 +01:00
autogits_workflow_pr_bot requested review from opensuse-review 2026-01-20 10:16:55 +01:00
opensuse-review commented 2026-01-20 10:17:08 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
maintenance-release-review commented 2026-01-20 10:17:29 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
legaldb commented 2026-01-20 10:27:05 +01:00
Member
Copy Link

Legal reviewed as acceptable:

Accepted because previously reviewed under the same license (280891)
Legal reviewed as [acceptable](https://legaldb.suse.de/reviews/details/498703): ``` Accepted because previously reviewed under the same license (280891) ```
report.md
933 B
legaldb approved these changes 2026-01-20 10:27:05 +01:00
rfrohl commented 2026-01-20 15:46:32 +01:00
First-time contributor
Copy Link

@maintenance-release-review: approve

@maintenance-release-review: approve
maintenance-release-review approved these changes 2026-01-20 15:50:10 +01:00
maintenance-release-review left a comment
First-time contributor
Copy Link

rfrohl approved a review on behalf of maintenance-release-review

rfrohl approved a review on behalf of maintenance-release-review
oertel commented 2026-01-20 18:39:46 +01:00
First-time contributor
Copy Link

@opensuse-review : approve

LGTM

@opensuse-review : approve LGTM
oertel commented 2026-01-20 18:39:46 +01:00
First-time contributor
Copy Link

merge ok

merge ok
opensuse-review approved these changes 2026-01-20 18:49:50 +01:00
opensuse-review left a comment
Member
Copy Link

oertel approved a review on behalf of opensuse-review

oertel approved a review on behalf of opensuse-review
dgarcia manually merged commit 6a88841ded into leap-16.0 2026-01-21 00:32:20 +01:00
Sign in to join this conversation.
Reviewers
No Reviewers
legaldb
maintenance-release-review
opensuse-review
Labels
Clear labels
legaldb
Critical Priority
Critical legaldb priority
Archived
legaldb
High Priority
2
High legaldb priority
legaldb
Normal Priority
1
Normal legaldb priority
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
adamm_super adrianSuSE autobuild-owner autobuild-review autogits_workflow_pr_bot bigironman dirkmueller eroca factory_bot gitea_test legaldb lkocman-factory maxlin_factory opensuse-review packagehub-review smithfarm
No Assignees
6 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pool/python-weasyprint#1
Delete Branch "dgarcia/python-weasyprint:CVE-2025-68616"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?