10
0

11 Commits

Author SHA256 Message Date
c4a8737406 Add CVE-2025-68146.patch to fix CVE-2025-68146 (bsc#1255244) 2026-01-07 10:13:13 +01:00
adc4aa74d9 Accepting request 1254336 from devel:languages:python
OBS-URL: https://build.opensuse.org/request/show/1254336
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-filelock?expand=0&rev=24
2025-03-20 18:24:38 +00:00
f8d1910013 - Update to 3.18.0
* Indicate that locks are exclusive/write locks
  * Support fcntl check on Emscripten

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-filelock?expand=0&rev=52
2025-03-19 08:57:05 +00:00
d2053e1b98 Accepting request 1241340 from devel:languages:python
OBS-URL: https://build.opensuse.org/request/show/1241340
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-filelock?expand=0&rev=23
2025-01-31 15:01:56 +00:00
0a519cc0ee - Update to 3.17.0
* Drop support for Python 3.8
  * Update README.md

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-filelock?expand=0&rev=50
2025-01-30 12:30:25 +00:00
413069b4bb Accepting request 1206466 from devel:languages:python
OBS-URL: https://build.opensuse.org/request/show/1206466
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-filelock?expand=0&rev=22
2024-10-09 20:03:29 +00:00
5b9b589384 - Update to 3.16.1
* CI improvements

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-filelock?expand=0&rev=48
2024-10-09 07:36:37 +00:00
40005fbf11 Accepting request 1199632 from devel:languages:python
- update to 3.16.0:
  * Test Python 3.13
  * Add 3.13 to CI
- update to 3.15.4:
  * Pass `file_lock` as positional argument
- update to 3.15.3:
  * Add test for virtualenv stability
  * Fix `TypeError: _CountedFileLock.__init__() got an unexpected
    keyword argument 'timeout'`
- update to 3.15.2:
  * Use a metaclass to implement the singleton pattern
- split into test multibuild to avoid cycle over virtualenv

OBS-URL: https://build.opensuse.org/request/show/1199632
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-filelock?expand=0&rev=21
2024-09-10 19:12:23 +00:00
8abd4711f0 - split into test multibuild to avoid cycle over virtualenv
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-filelock?expand=0&rev=46
2024-09-09 08:56:54 +00:00
aa4be953b0 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-filelock?expand=0&rev=45 2024-09-08 15:59:07 +00:00
76165c8c12 - update to 3.16.0:
* Test Python 3.13
  * Add 3.13 to CI
- update to 3.15.4:
  * Pass `file_lock` as positional argument
- update to 3.15.3:
  * Add test for virtualenv stability
  * Fix `TypeError: _CountedFileLock.__init__() got an unexpected
    keyword argument 'timeout'`
- update to 3.15.2:
  * Use a metaclass to implement the singleton pattern

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-filelock?expand=0&rev=44
2024-09-08 15:57:35 +00:00
3 changed files with 22 additions and 1 deletions

14
CVE-2025-68146.patch Normal file
View File

@@ -0,0 +1,14 @@
Index: filelock-3.18.0/src/filelock/_unix.py
===================================================================
--- filelock-3.18.0.orig/src/filelock/_unix.py
+++ filelock-3.18.0/src/filelock/_unix.py
@@ -39,6 +39,9 @@ else: # pragma: win32 no cover
def _acquire(self) -> None:
ensure_directory_exists(self.lock_file)
open_flags = os.O_RDWR | os.O_TRUNC
+ o_nofollow = getattr(os, "O_NOFOLLOW", None)
+ if o_nofollow is not None:
+ open_flags |= o_nofollow
if not Path(self.lock_file).exists():
open_flags |= os.O_CREAT
fd = os.open(self.lock_file, open_flags, self._context.mode)

View File

@@ -1,3 +1,8 @@
-------------------------------------------------------------------
Wed Jan 7 09:12:08 UTC 2026 - Nico Krapp <nico.krapp@suse.com>
- Add CVE-2025-68146.patch to fix CVE-2025-68146 (bsc#1255244)
-------------------------------------------------------------------
Wed Mar 19 07:44:21 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>

View File

@@ -33,6 +33,8 @@ Summary: Platform Independent File Lock in Python
License: Unlicense
URL: https://github.com/tox-dev/py-filelock
Source: https://files.pythonhosted.org/packages/source/f/filelock/filelock-%{version}.tar.gz
# PATCH-FIX-UPSTREAM CVE-2025-68146.patch bsc#1255244 (gh#tox-dev/filelock/pulls/461, gh#tox-dev/filelock/pulls/463)
Patch0: CVE-2025-68146.patch
BuildRequires: %{python_module asyncio}
BuildRequires: %{python_module hatch_vcs}
BuildRequires: %{python_module hatchling}
@@ -59,7 +61,7 @@ independent file lock in Python, which provides a simple way of
inter-process communication.
%prep
%setup -q -n filelock-%{version}
%autosetup -p1 -n filelock-%{version}
%build
%pyproject_wheel