From 342d245e341f5815eedfcf07a36a1c71e692dcba539492772a0c4619e92fb2a2 Mon Sep 17 00:00:00 2001 From: Daniel Garcia Date: Tue, 9 May 2023 06:34:58 +0000 Subject: [PATCH] - Update to 2.7.0: WARNING: this is a security update. When processing SVG files, CairoSVG could access other files online, possibly leading to very long renderings or other security problems. This feature is now disabled by default. External resources can still be accessed using the "unsafe" or the "url_fetcher" parameter. OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-CairoSVG?expand=0&rev=27 --- CairoSVG-2.6.0.obscpio | 3 --- CairoSVG-2.7.0.obscpio | 3 +++ CairoSVG.obsinfo | 6 +++--- _service | 2 +- python-CairoSVG.changes | 12 ++++++++++++ python-CairoSVG.spec | 3 +-- 6 files changed, 20 insertions(+), 9 deletions(-) delete mode 100644 CairoSVG-2.6.0.obscpio create mode 100644 CairoSVG-2.7.0.obscpio diff --git a/CairoSVG-2.6.0.obscpio b/CairoSVG-2.6.0.obscpio deleted file mode 100644 index a4bfe3a..0000000 --- a/CairoSVG-2.6.0.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3aacfc595740e3030e52e67c6581a7de8511deffce869c144806d732456b8508 -size 262793230 diff --git a/CairoSVG-2.7.0.obscpio b/CairoSVG-2.7.0.obscpio new file mode 100644 index 0000000..86ee4e0 --- /dev/null +++ b/CairoSVG-2.7.0.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:785ec7af79d9915d555ecd4b154621948779e174b9ccc2bb292f4ace6cf4a057 +size 262793742 diff --git a/CairoSVG.obsinfo b/CairoSVG.obsinfo index eee200b..61e6345 100644 --- a/CairoSVG.obsinfo +++ b/CairoSVG.obsinfo @@ -1,4 +1,4 @@ name: CairoSVG -version: 2.6.0 -mtime: 1673542007 -commit: f5170f8d5a1cb8f9738228038edd6efab52566d7 +version: 2.7.0 +mtime: 1679322684 +commit: 33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53 diff --git a/_service b/_service index 2974551..987a2d1 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://github.com/Kozea/CairoSVG.git git enable - f5170f8 + 33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53 @PARENT_TAG@ diff --git a/python-CairoSVG.changes b/python-CairoSVG.changes index 454e5f9..538c00f 100644 --- a/python-CairoSVG.changes +++ b/python-CairoSVG.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Tue May 9 06:33:14 UTC 2023 - Daniel Garcia + +- Update to 2.7.0: + WARNING: this is a security update. + + When processing SVG files, CairoSVG could access other files online, + possibly leading to very long renderings or other security problems. + + This feature is now disabled by default. External resources can still be + accessed using the "unsafe" or the "url_fetcher" parameter. + ------------------------------------------------------------------- Fri Apr 21 12:20:15 UTC 2023 - Dirk Müller diff --git a/python-CairoSVG.spec b/python-CairoSVG.spec index 0218853..5d2f17c 100644 --- a/python-CairoSVG.spec +++ b/python-CairoSVG.spec @@ -16,11 +16,10 @@ # -%{?!python_module:%define python_module() python-%{**} python3-%{**}} %define skip_python2 1 %{?sle15_python_module_pythons} Name: python-CairoSVG -Version: 2.6.0 +Version: 2.7.0 Release: 0 Summary: A Python SVG converter based on Cairo License: LGPL-3.0-or-later