From 33e4c4251c515967a918dc87b7f2bdabb9a3aef9e17bb2b27d238297d931ae94 Mon Sep 17 00:00:00 2001
From: Matej Cepl <mcepl@suse.com>
Date: Mon, 27 Jan 2025 15:21:08 +0000
Subject: [PATCH] Add information about the fixed CVE.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=43
---
 python-asteval.changes | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/python-asteval.changes b/python-asteval.changes
index 3655fd1..a8dc4e3 100644
--- a/python-asteval.changes
+++ b/python-asteval.changes
@@ -5,7 +5,8 @@ Mon Jan 27 12:42:41 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.c
   * drop testing and support for Python3.8, add Python 3.13,
     change document to reflect this.
   * implement safe_getattr and safe_format functions; fix bugs
-    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage
+    in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage (bsc#1236405,
+    CVE-2025-24359)
   * make all procedure attributes private to curb access to AST
     nodes, which can be exploited
   * improvements to error messages, including use ast functions