From 60fb8787c281113348017cd34ecd0bddac1cb504f3f5fb8d3272c865f064c39d Mon Sep 17 00:00:00 2001 From: Robert Schweikert Date: Sat, 13 Apr 2019 09:56:36 +0000 Subject: [PATCH 1/3] Accepting request 693824 from home:apersaud:branches:devel:languages:python update to latest version OBS-URL: https://build.opensuse.org/request/show/693824 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Jinja2?expand=0&rev=65 --- Jinja2-2.10.1.tar.gz | 3 +++ Jinja2-2.10.tar.gz | 3 --- python-Jinja2.changes | 8 ++++++++ python-Jinja2.spec | 4 ++-- 4 files changed, 13 insertions(+), 5 deletions(-) create mode 100644 Jinja2-2.10.1.tar.gz delete mode 100644 Jinja2-2.10.tar.gz diff --git a/Jinja2-2.10.1.tar.gz b/Jinja2-2.10.1.tar.gz new file mode 100644 index 0000000..16dd892 --- /dev/null +++ b/Jinja2-2.10.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:065c4f02ebe7f7cf559e49ee5a95fb800a9e4528727aec6f24402a5374c65013 +size 260956 diff --git a/Jinja2-2.10.tar.gz b/Jinja2-2.10.tar.gz deleted file mode 100644 index 88ed367..0000000 --- a/Jinja2-2.10.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f84be1bb0040caca4cea721fcbbbbd61f9be9464ca236387158b0feea01914a4 -size 261631 diff --git a/python-Jinja2.changes b/python-Jinja2.changes index 3bcdc70..ea0f694 100644 --- a/python-Jinja2.changes +++ b/python-Jinja2.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Sat Apr 13 03:06:31 UTC 2019 - Arun Persaud + +- update to version 2.10.1: + * "SandboxedEnvironment" securely handles "str.format_map" in order + to prevent code execution through untrusted format strings. The + sandbox already handled "str.format". + ------------------------------------------------------------------- Tue Feb 19 03:45:55 UTC 2019 - John Vandenberg diff --git a/python-Jinja2.spec b/python-Jinja2.spec index 4ad893c..af82bda 100644 --- a/python-Jinja2.spec +++ b/python-Jinja2.spec @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %define oldpython python Name: python-Jinja2 -Version: 2.10 +Version: 2.10.1 Release: 0 Summary: A fast and easy to use template engine written in pure Python License: BSD-3-Clause @@ -95,7 +95,7 @@ install -Dm644 ext/jinja.el %{buildroot}%{_datadir}/emacs/site-lisp/jinja.el # I %endif %check -%python_exec -m pytest +%pytest %files %{python_files} %license LICENSE From 45d9838fa251c71315bd5a0fe7013097b58c0b6a247c566ad37587b3e8a0a93b Mon Sep 17 00:00:00 2001 From: Thomas Bechtold Date: Mon, 15 Apr 2019 06:36:04 +0000 Subject: [PATCH 2/3] - update to version 2.10.1 (bsc#1132323, CVE-2019-10906): OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Jinja2?expand=0&rev=66 --- python-Jinja2.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python-Jinja2.changes b/python-Jinja2.changes index ea0f694..9da423c 100644 --- a/python-Jinja2.changes +++ b/python-Jinja2.changes @@ -1,7 +1,7 @@ ------------------------------------------------------------------- Sat Apr 13 03:06:31 UTC 2019 - Arun Persaud -- update to version 2.10.1: +- update to version 2.10.1 (bsc#1132323, CVE-2019-10906): * "SandboxedEnvironment" securely handles "str.format_map" in order to prevent code execution through untrusted format strings. The sandbox already handled "str.format". From 08a1273b8f375c22a120346f77a8f9f11c177f8d5c2926b232304e04e3d78203 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Mon, 15 Apr 2019 09:38:14 +0000 Subject: [PATCH 3/3] Accepting request 693919 from home:jengelh:branches:devel:languages:python - Trim bias from descriptions. Make sure % is escaped. OBS-URL: https://build.opensuse.org/request/show/693919 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Jinja2?expand=0&rev=67 --- python-Jinja2.changes | 5 +++++ python-Jinja2.spec | 14 +++++++------- 2 files changed, 12 insertions(+), 7 deletions(-) diff --git a/python-Jinja2.changes b/python-Jinja2.changes index 9da423c..00521d2 100644 --- a/python-Jinja2.changes +++ b/python-Jinja2.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Sat Apr 13 16:46:23 UTC 2019 - Jan Engelhardt + +- Trim bias from descriptions. Make sure % is escaped. + ------------------------------------------------------------------- Sat Apr 13 03:06:31 UTC 2019 - Arun Persaud diff --git a/python-Jinja2.spec b/python-Jinja2.spec index af82bda..bbc4483 100644 --- a/python-Jinja2.spec +++ b/python-Jinja2.spec @@ -21,7 +21,7 @@ Name: python-Jinja2 Version: 2.10.1 Release: 0 -Summary: A fast and easy to use template engine written in pure Python +Summary: A template engine written in pure Python License: BSD-3-Clause Group: Development/Languages/Python URL: http://jinja.pocoo.org/ @@ -45,15 +45,15 @@ Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Here a small example of a Jinja template: - {% extends 'base.html' %} - {% block title %}Memberlist{% endblock %} - {% block content %} + {%% extends 'base.html' %%} + {%% block title %%}Memberlist{%% endblock %%} + {%% block content %%}
    - {% for user in users %} + {%% for user in users %%}
  • {{ user.username }}
    • - {% endfor %} + {%% endfor %%}
- {% endblock %} + {%% endblock %%} %package -n python-Jinja2-vim Summary: Jinja2 syntax files for Vim