Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Authlib for openSUSE:Factory checked in at 2021-08-16 10:11:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Authlib (Old) and /work/SRC/openSUSE:Factory/.python-Authlib.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Authlib" Mon Aug 16 10:11:33 2021 rev:3 rq:911999 version:0.15.4 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Authlib/python-Authlib.changes 2021-08-11 11:47:31.297724527 +0200 +++ /work/SRC/openSUSE:Factory/.python-Authlib.new.1899/python-Authlib.changes 2021-08-16 10:17:42.190650332 +0200 @@ -1,0 +2,6 @@ +Fri Aug 13 11:16:21 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaub...@suse.com> + +- Update to 0.15.4 + * Security fix when JWT claims is None. + +------------------------------------------------------------------- Old: ---- Authlib-0.15.3.tar.gz New: ---- Authlib-0.15.4.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Authlib.spec ++++++ --- /var/tmp/diff_new_pack.i5DcZC/_old 2021-08-16 10:17:42.626649632 +0200 +++ /var/tmp/diff_new_pack.i5DcZC/_new 2021-08-16 10:17:42.630649626 +0200 @@ -18,7 +18,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-Authlib -Version: 0.15.3 +Version: 0.15.4 Release: 0 Summary: Python library for building OAuth and OpenID Connect servers License: BSD-3-Clause ++++++ Authlib-0.15.3.tar.gz -> Authlib-0.15.4.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Authlib-0.15.3/Authlib.egg-info/PKG-INFO new/Authlib-0.15.4/Authlib.egg-info/PKG-INFO --- old/Authlib-0.15.3/Authlib.egg-info/PKG-INFO 2021-01-15 14:57:11.000000000 +0100 +++ new/Authlib-0.15.4/Authlib.egg-info/PKG-INFO 2021-06-05 09:08:57.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: Authlib -Version: 0.15.3 +Version: 0.15.4 Summary: The ultimate Python library in building OAuth and OpenID Connect servers. Home-page: https://authlib.org/ Author: Hsiaoming Yang diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Authlib-0.15.3/PKG-INFO new/Authlib-0.15.4/PKG-INFO --- old/Authlib-0.15.3/PKG-INFO 2021-01-15 14:57:12.000000000 +0100 +++ new/Authlib-0.15.4/PKG-INFO 2021-06-05 09:08:57.000000000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.1 Name: Authlib -Version: 0.15.3 +Version: 0.15.4 Summary: The ultimate Python library in building OAuth and OpenID Connect servers. Home-page: https://authlib.org/ Author: Hsiaoming Yang diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Authlib-0.15.3/authlib/consts.py new/Authlib-0.15.4/authlib/consts.py --- old/Authlib-0.15.3/authlib/consts.py 2021-01-15 14:56:37.000000000 +0100 +++ new/Authlib-0.15.4/authlib/consts.py 2021-06-05 09:08:48.000000000 +0200 @@ -1,5 +1,5 @@ name = 'Authlib' -version = '0.15.3' +version = '0.15.4' author = 'Hsiaoming Yang <m...@lepture.com>' homepage = 'https://authlib.org/' default_user_agent = '{}/{} (+{})'.format(name, version, homepage) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Authlib-0.15.3/authlib/jose/rfc7519/claims.py new/Authlib-0.15.4/authlib/jose/rfc7519/claims.py --- old/Authlib-0.15.3/authlib/jose/rfc7519/claims.py 2020-10-14 02:33:16.000000000 +0200 +++ new/Authlib-0.15.4/authlib/jose/rfc7519/claims.py 2021-06-05 09:08:48.000000000 +0200 @@ -58,10 +58,10 @@ def _validate_claim_value(self, claim_name): option = self.options.get(claim_name) - value = self.get(claim_name) - if not option or not value: + if not option: return + value = self.get(claim_name) option_value = option.get('value') if option_value and value != option_value: raise InvalidClaimError(claim_name)