From 2a11a765e3ba2cb0c40341a93984b99e8585d2fb3ae6c107a40d9a8c18ea2740 Mon Sep 17 00:00:00 2001
From: Matej Cepl <mcepl@suse.com>
Date: Mon, 27 Jan 2025 15:21:08 +0000
Subject: [PATCH] Add information about the fixed CVE.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=43
---
 python-asteval.changes | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/python-asteval.changes b/python-asteval.changes
index 3655fd1..a8dc4e3 100644
--- a/python-asteval.changes
+++ b/python-asteval.changes
@@ -5,7 +5,8 @@ Mon Jan 27 12:42:41 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.c
   * drop testing and support for Python3.8, add Python 3.13,
     change document to reflect this.
   * implement safe_getattr and safe_format functions; fix bugs
-    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
+    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage (bsc#1236405,
+    CVE-2025-24359)
   * make all procedure attributes private to curb access to AST
     nodes, which can be exploited
   * improvements to error messages, including use ast functions