From 9b0e826d6718672376ff0fe12cd2d6c5aaee88a6a8ddd0906dae4bfb51bc3039 Mon Sep 17 00:00:00 2001 From: Matej Cepl Date: Sun, 19 Jan 2020 07:30:45 +0000 Subject: [PATCH] Add reference to CVE-2017-18361 in changes OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-colander?expand=0&rev=12 --- python-colander.changes | 2 +- python-colander.spec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/python-colander.changes b/python-colander.changes index 360397c..4cbd30c 100644 --- a/python-colander.changes +++ b/python-colander.changes @@ -6,7 +6,7 @@ Mon Oct 14 11:44:08 UTC 2019 - Matej Cepl ------------------------------------------------------------------- Thu Feb 7 12:18:38 UTC 2019 - Hans-Peter Jansen -- Update to 1.7.0 (2019-02-01) +- Update to 1.7.0 (2019-02-01), also fixes bsc#1123996 (CVE-2017-18361) + The URL validator regex has been updated to no longer be vulnerable to a catastrophic backtracking that would have led to an infinite loop. diff --git a/python-colander.spec b/python-colander.spec index 3549c9b..f6f607f 100644 --- a/python-colander.spec +++ b/python-colander.spec @@ -1,7 +1,7 @@ # # spec file for package python-colander # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # Copyright (c) 2013-2019 LISA GmbH, Bingen, Germany. # # All modifications and additions to the file contributed by third parties