Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Flask for openSUSE:Factory checked in at 2026-02-26 18:49:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Flask (Old) and /work/SRC/openSUSE:Factory/.python-Flask.new.29461 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Flask" Thu Feb 26 18:49:43 2026 rev:44 rq:1335000 version:3.1.3 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Flask/python-Flask.changes 2025-05-23 14:27:19.468381571 +0200 +++ /work/SRC/openSUSE:Factory/.python-Flask.new.29461/python-Flask.changes 2026-02-26 18:49:45.408282640 +0100 @@ -1,0 +2,13 @@ +Tue Feb 24 10:28:13 UTC 2026 - Nico Krapp <[email protected]> + +- Update to 3.1.3 (CVE-2026-27205, bsc#1258700) + * The session is marked as accessed for operations that only + access the keys but not the values, such as in and len. + GHSA-68rp-wp8r-4726 +- Update to 3.1.2 + * stream_with_context does not fail inside async views. #5774 + * When using follow_redirects in the test client, the final state + of session is correct. #5786 + * Relax type hint for passing bytes IO to send_file. #5776 + +------------------------------------------------------------------- Old: ---- flask-3.1.1.tar.gz New: ---- flask-3.1.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Flask.spec ++++++ --- /var/tmp/diff_new_pack.BBuZe0/_old 2026-02-26 18:49:46.504328348 +0100 +++ /var/tmp/diff_new_pack.BBuZe0/_new 2026-02-26 18:49:46.504328348 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-Flask # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,7 +24,7 @@ %{?sle15_python_module_pythons} Name: python-Flask -Version: 3.1.1 +Version: 3.1.3 Release: 0 Summary: A microframework based on Werkzeug, Jinja2 and good intentions License: BSD-3-Clause @@ -34,6 +34,7 @@ BuildRequires: %{python_module Jinja2 >= 3.1.2} BuildRequires: %{python_module MarkupSafe} BuildRequires: %{python_module Werkzeug >= 3.1.0} +BuildRequires: %{python_module asgiref} BuildRequires: %{python_module base >= 3.9} BuildRequires: %{python_module blinker >= 1.9} BuildRequires: %{python_module click >= 8.1.3} @@ -51,6 +52,7 @@ Requires: python-blinker >= 1.9 Requires: python-click >= 8.1.3 Requires: python-itsdangerous >= 2.2 +Recommends: python-asgiref %if 0%{?python_version_nodots} < 310 Requires: python-importlib-metadata >= 3.6.0 %endif @@ -63,9 +65,6 @@ Requires(postun): update-alternatives %endif BuildArch: noarch -%if %{?suse_version} < 1500 -BuildRequires: python -%endif %python_subpackages %description ++++++ flask-3.1.1.tar.gz -> flask-3.1.3.tar.gz ++++++ ++++ 4204 lines of diff (skipped)
