Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:ecsos:python
python-Jinja2-2
python-Jinja2.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File python-Jinja2.changes of Package python-Jinja2-2
------------------------------------------------------------------- Tue May 7 12:58:20 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com> - Add CVE-2024-34064.patch upstream patch (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4) Also fixes (CVE-2024-22195, bsc#1218722) ------------------------------------------------------------------- Thu Feb 18 12:15:33 UTC 2021 - Alexandros Toptsoglou <atoptsoglou@suse.com> - Fixed IndentationError in CVE-2020-28493.patch (bsc#1182244) ------------------------------------------------------------------- Tue Feb 9 16:45:18 UTC 2021 - Alexandros Toptsoglou <atoptsoglou@suse.com> - CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have been called with untrusted user data (bsc#1181944). Added CVE-2020-28493.patch ------------------------------------------------------------------- Sat Apr 13 03:06:31 UTC 2019 - Arun Persaud <arun@gmx.de> - update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341): * "SandboxedEnvironment" securely handles "str.format_map" in order to prevent code execution through untrusted format strings. The sandbox already handled "str.format". ------------------------------------------------------------------- Thu Nov 9 06:26:51 UTC 2017 - arun@gmx.de - specfile: * CHANGES -> CHANGES.rst * added README.rst to %doc section - update to version 2.10: * Added a new extension node called "OverlayScope" which can be used to create an unoptimized scope that will look up all variables from a derived context. * Added an "in" test that works like the in operator. This can be used in combination with "reject" and "select". * Added "previtem" and "nextitem" to loop contexts, providing access to the previous/next item in the loop. If such an item does not exist, the value is undefined. * Added "changed(*values)" to loop contexts, providing an easy way of checking whether a value has changed since the last iteration (or rather since the last call of the method) * Added a "namespace" function that creates a special object which allows attribute assignment using the "set" tag. This can be used to carry data across scopes, e.g. from a loop body to code that comes after the loop. * Added a "trimmed" modifier to "{% trans %}" to strip linebreaks and surrounding whitespace. Also added a new policy to enable this for all "trans" blocks. * The "random" filter is no longer incorrectly constant folded and will produce a new random choice each time the template is rendered. (`#478`_) * Added a "unique" filter. (`#469`_) * Added "min" and "max" filters. (`#475`_) * Added tests for all comparison operators: "eq", "ne", "lt", "le", "gt", "ge". (`#665`_) * "import" statement cannot end with a trailing comma. (`#617`_, `#618`_) * "indent" filter will not indent blank lines by default. (`#685`_) * Add "reverse" argument for "dictsort" filter. (`#692`_) * Add a "NativeEnvironment" that renders templates to native Python types instead of strings. (`#708`_) * Added filter support to the block "set" tag. (`#489`_) * "tojson" filter marks output as safe to match documented behavior. (`#718`_) * Resolved a bug where getting debug locals for tracebacks could modify template context. * Fixed a bug where having many "{% elif ... %}" blocks resulted in a "too many levels of indentation" error. These blocks now compile to native "elif ..:" instead of "else: if ..:" (`#759`_) ------------------------------------------------------------------- Tue Apr 4 14:56:17 UTC 2017 - jmatejek@suse.com - update for singlespec - update to 2.9.6 * fixed custom context behavior in fast resolve mode ------------------------------------------------------------------- Wed Mar 22 04:39:40 UTC 2017 - dmueller@suse.com - fix requires ------------------------------------------------------------------- Wed Mar 15 13:55:57 UTC 2017 - michael@stroeder.com - Update to 2.9.5 (bsc#1132174, CVE-2016-10745) (see the changes in /usr/share/doc/packages/python-Jinja2/CHANGES) - updated source URL ------------------------------------------------------------------- Thu Nov 19 13:18:12 UTC 2015 - aplanas@suse.com - Update to 2.8 - Added `target` parameter to urlize function. - Added support for `followsymlinks` to the file system loader. - The truncate filter now counts the length. - Added equalto filter that helps with select filters. - Changed cache keys to use absolute file names if available instead of load names. - Fixed loop length calculation for some iterators. - Changed how Jinja2 enforces strings to be native strings in Python 2 to work when people break their default encoding. - Added :func:`make_logging_undefined` which returns an undefined object that logs failures into a logger. - If unmarshalling of cached data fails the template will be reloaded now. - Implemented a block ``set`` tag. - Default cache size was incrased to 400 from a low 50. - Fixed ``is number`` test to accept long integers in all Python versions. - Changed ``is number`` to accept Decimal as a number. - Added a check for default arguments followed by non-default arguments. This change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The previous behavior for this code was broken anyway (resulting in the default value being applied to `y`). - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and ``jinja2.runtime.Context`` by adding two new attributes to the environment (`code_generator_class` and `context_class`) (pull request ``#404``). - added support for context/environment/evalctx decorator functions on the finalize callback of the environment. - escape query strings for urlencode properly. Previously slashes were not escaped in that place. - Add 'base' parameter to 'int' filter. - Tests are removed from the package (not distributed in the tar.gz) ------------------------------------------------------------------- Wed Jul 22 14:20:45 UTC 2015 - jengelh@inai.de - Use %python_version over %py_ver: better portability to RHEL ------------------------------------------------------------------- Fri Aug 15 12:30:58 UTC 2014 - mcihar@suse.cz - run testsuite during build ------------------------------------------------------------------- Fri Aug 15 12:29:35 UTC 2014 - mcihar@suse.cz - adjust dependency to use up to date package name for python-MarkupSafe ------------------------------------------------------------------- Tue Jul 15 10:41:00 UTC 2014 - toddrme2178@gmail.com - Update to 2.7.3 (bnc#858239, CVE-2014-0012) - Security issue: Corrected the security fix for the cache folder. This fix was provided by RedHat. ------------------------------------------------------------------- Thu May 8 21:21:45 UTC 2014 - hpj@urpla.net - fix package build (file selection missing) ------------------------------------------------------------------- Sat Apr 26 19:38:39 UTC 2014 - dmueller@suse.com - avoid rebuildcycle with vim ------------------------------------------------------------------- Mon Jan 13 13:18:53 UTC 2014 - dmueller@suse.com - update to 2.7.2: - Prefix loader was not forwarding the locals properly to inner loaders. This is now fixed. - Security issue: Changed the default folder for the filesystem cache to be user specific and read and write protected on UNIX systems. See `Debian bug 734747`_ for more information. ------------------------------------------------------------------- Thu Oct 24 11:07:20 UTC 2013 - speilicke@suse.com - Require python-setuptools instead of distribute (upstreams merged) ------------------------------------------------------------------- Mon Sep 2 15:03:25 UTC 2013 - speilicke@suse.com - Avoid "Recommends:" on old rpm distros ------------------------------------------------------------------- Tue Aug 13 09:56:18 UTC 2013 - dmueller@suse.com - update to 2.7.1: - Fixed a bug with ``call_filter`` not working properly on environment and context filters. - Fixed lack of Python 3 support for bytecode caches. - Reverted support for defining blocks in included templates as this broke existing templates for users. - Fixed some warnings with hashing of undefineds and nodes if Python is run with warnings for Python 3. - Added support for properly hashing undefined objects. - Fixed a bug with the title filter not working on already uppercase strings. ------------------------------------------------------------------- Thu Jul 11 14:37:06 UTC 2013 - dmueller@suse.com - update to 2.7: - Choice and prefix loaders now dispatch source and template lookup separately in order to work in combination with module loaders as advertised. - Fixed filesizeformat. - Added a non-silent option for babel extraction. - Added `urlencode` filter that automatically quotes values for URL safe usage with utf-8 as only supported encoding. If applications want to change this encoding they can override the filter. - Added `keep-trailing-newline` configuration to environments and templates to optionally preserve the final trailing newline. - Accessing `last` on the loop context no longer causes the iterator to be consumed into a list. - Python requirement changed: 2.6, 2.7 or >= 3.3 are required now, supported by same source code, using the "six" compatibility library. - Allow `contextfunction` and other decorators to be applied to `__call__`. - Added support for changing from newline to different signs in the `wordwrap` filter. - Added support for ignoring memcache errors silently. - Added support for keeping the trailing newline in templates. - Added finer grained support for stripping whitespace on the left side of blocks. - Added `map`, `select`, `reject`, `selectattr` and `rejectattr` filters. - Added support for `loop.depth` to figure out how deep inside a recursive loop the code is. - Disabled py_compile for pypy and python 3. ------------------------------------------------------------------- Mon Apr 30 13:06:58 UTC 2012 - toddrme2178@gmail.com - Fix building python 3 package on openSUSE 11.4 x86_64 ------------------------------------------------------------------- Thu Apr 26 14:08:18 UTC 2012 - toddrme2178@gmail.com - Add 2to3 buildrequires to allow for proper conversion of python 3 version ------------------------------------------------------------------- Mon Apr 23 12:00:49 UTC 2012 - toddrme2178@gmail.com - Add python 3 package - Simplify vim plugin packaging - Add suggests for vim and emacs in their respective packages - Removed test for obsolete openSUSE version ------------------------------------------------------------------- Thu Feb 23 13:44:50 UTC 2012 - saschpe@suse.de - Simplified macro usage ------------------------------------------------------------------- Thu Sep 22 12:00:51 UTC 2011 - saschpe@suse.de - Split of 'vim' and 'emacs' sub-packages that contain syntax highlighting support for both editors ------------------------------------------------------------------- Thu Sep 22 09:13:19 UTC 2011 - saschpe@suse.de - Set license to BSD-3-Clause (SPDX style) - Require python-distribute instead of python-setuptools ------------------------------------------------------------------- Tue Sep 20 12:57:24 UTC 2011 - saschpe@suse.de - Update to version 2.6: * internal attributes now raise an internal attribute error now instead of returning an undefined. This fixes problems when passing undefined objects to Python semantics expecting APIs. * traceback support now works properly for PyPy. (Tested with 1.4) * implemented operator intercepting for sandboxed environments. This allows application developers to disable builtin operators for better security. (For instance limit the mathematical operators to actual integers instead of longs) * groupby filter now supports dotted notation for grouping by attributes of attributes. * scoped blocks not properly treat toplevel assignments and imports. Previously an import suddenly "disappeared" in a scoped block. * automatically detect newer Python interpreter versions before loading code from bytecode caches to prevent segfaults on invalid opcodes. The segfault in earlier Jinja2 versions here was not a Jinja2 bug but a limitation in the underlying Python interpreter. If you notice Jinja2 segfaulting in earlier versions after an upgrade of the Python interpreter you don't have to upgrade, it's enough to flush the bytecode cache. This just no longer makes this necessary, Jinja2 will automatically detect these cases now. * the sum filter can now sum up values by attribute. This is a backwards incompatible change. The argument to the filter previously was the optional starting index which defaultes to zero. This now became the second argument to the function because it's rarely used. * like sum, sort now also makes it possible to order items by attribute. * like sum and sort, join now also is able to join attributes of objects as string. * the internal eval context now has a reference to the environment. * added a mapping test to see if an object is a dict or an object with a similar interface. ------------------------------------------------------------------- Wed Jul 20 20:27:08 UTC 2011 - saschpe@gmx.de - Renamed to python-Jinja2 - Fix wrong EOL encodings ------------------------------------------------------------------- Thu Apr 7 14:56:33 UTC 2011 - saschpe@suse.de - Do not require python-setuptools, buildrequires is sufficient - Removed authors from description - Changed license to BSD3c ------------------------------------------------------------------- Sun Dec 12 17:45:39 UTC 2010 - saschpe@gmx.de - rpmlint issues cleanup * fdupes, tar.bz2 tarball, ... - package docs again (lost with last revision) ------------------------------------------------------------------- Sat Dec 11 23:23:05 UTC 2010 - saschpe@gmx.de - re-generated spec file with py2pack * now builds for Fedora and Mandriva ------------------------------------------------------------------- Thu Sep 17 20:33:11 UTC 2009 - alexandre@exatati.com.br - Update to 2.2.1; - Fixed changes file name. ------------------------------------------------------------------- Mon Jun 8 14:05:51 CEST 2009 - poeml@suse.de - initial package (2.1.1)
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
