diff --git a/jaraco_context-6.0.1.tar.gz b/jaraco_context-6.0.1.tar.gz deleted file mode 100644 index 96ffe7c..0000000 --- a/jaraco_context-6.0.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9bae4ea555cf0b14938dc0aee7c9f32ed303aa20a3b73e7dc80111628792d1b3 -size 13912 diff --git a/jaraco_context-6.1.0.tar.gz b/jaraco_context-6.1.0.tar.gz new file mode 100644 index 0000000..236673d --- /dev/null +++ b/jaraco_context-6.1.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:129a341b0a85a7db7879e22acd66902fda67882db771754574338898b2d5d86f +size 15850 diff --git a/python-jaraco.context.changes b/python-jaraco.context.changes index 20fc17c..e319738 100644 --- a/python-jaraco.context.changes +++ b/python-jaraco.context.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Jan 20 09:52:54 UTC 2026 - Nico Krapp + +- Update to 6.1.0 (fixes CVE-2026-23949, bsc#1256954) + * In tarfile.context, ensure that the default filter honors the data filter + to avoid path traversal vulnerabilities. + ------------------------------------------------------------------- Mon Sep 29 11:52:00 UTC 2025 - Dirk Müller diff --git a/python-jaraco.context.spec b/python-jaraco.context.spec index df13451..52d8005 100644 --- a/python-jaraco.context.spec +++ b/python-jaraco.context.spec @@ -1,7 +1,7 @@ # # spec file for package python-jaraco.context # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-jaraco.context -Version: 6.0.1 +Version: 6.1.0 Release: 0 Summary: Tools to work with functools License: MIT