Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package python-Authlib for openSUSE:Factory 
checked in at 2021-08-16 10:11:33
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-Authlib (Old)
 and      /work/SRC/openSUSE:Factory/.python-Authlib.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python-Authlib"

Mon Aug 16 10:11:33 2021 rev:3 rq:911999 version:0.15.4

Changes:
--------
--- /work/SRC/openSUSE:Factory/python-Authlib/python-Authlib.changes    
2021-08-11 11:47:31.297724527 +0200
+++ /work/SRC/openSUSE:Factory/.python-Authlib.new.1899/python-Authlib.changes  
2021-08-16 10:17:42.190650332 +0200
@@ -1,0 +2,6 @@
+Fri Aug 13 11:16:21 UTC 2021 - John Paul Adrian Glaubitz 
<adrian.glaub...@suse.com>
+
+- Update to 0.15.4
+  * Security fix when JWT claims is None.
+
+-------------------------------------------------------------------

Old:
----
  Authlib-0.15.3.tar.gz

New:
----
  Authlib-0.15.4.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python-Authlib.spec ++++++
--- /var/tmp/diff_new_pack.i5DcZC/_old  2021-08-16 10:17:42.626649632 +0200
+++ /var/tmp/diff_new_pack.i5DcZC/_new  2021-08-16 10:17:42.630649626 +0200
@@ -18,7 +18,7 @@
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-Authlib
-Version:        0.15.3
+Version:        0.15.4
 Release:        0
 Summary:        Python library for building OAuth and OpenID Connect servers
 License:        BSD-3-Clause

++++++ Authlib-0.15.3.tar.gz -> Authlib-0.15.4.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Authlib-0.15.3/Authlib.egg-info/PKG-INFO 
new/Authlib-0.15.4/Authlib.egg-info/PKG-INFO
--- old/Authlib-0.15.3/Authlib.egg-info/PKG-INFO        2021-01-15 
14:57:11.000000000 +0100
+++ new/Authlib-0.15.4/Authlib.egg-info/PKG-INFO        2021-06-05 
09:08:57.000000000 +0200
@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: Authlib
-Version: 0.15.3
+Version: 0.15.4
 Summary: The ultimate Python library in building OAuth and OpenID Connect 
servers.
 Home-page: https://authlib.org/
 Author: Hsiaoming Yang
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Authlib-0.15.3/PKG-INFO new/Authlib-0.15.4/PKG-INFO
--- old/Authlib-0.15.3/PKG-INFO 2021-01-15 14:57:12.000000000 +0100
+++ new/Authlib-0.15.4/PKG-INFO 2021-06-05 09:08:57.000000000 +0200
@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: Authlib
-Version: 0.15.3
+Version: 0.15.4
 Summary: The ultimate Python library in building OAuth and OpenID Connect 
servers.
 Home-page: https://authlib.org/
 Author: Hsiaoming Yang
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Authlib-0.15.3/authlib/consts.py 
new/Authlib-0.15.4/authlib/consts.py
--- old/Authlib-0.15.3/authlib/consts.py        2021-01-15 14:56:37.000000000 
+0100
+++ new/Authlib-0.15.4/authlib/consts.py        2021-06-05 09:08:48.000000000 
+0200
@@ -1,5 +1,5 @@
 name = 'Authlib'
-version = '0.15.3'
+version = '0.15.4'
 author = 'Hsiaoming Yang <m...@lepture.com>'
 homepage = 'https://authlib.org/'
 default_user_agent = '{}/{} (+{})'.format(name, version, homepage)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Authlib-0.15.3/authlib/jose/rfc7519/claims.py 
new/Authlib-0.15.4/authlib/jose/rfc7519/claims.py
--- old/Authlib-0.15.3/authlib/jose/rfc7519/claims.py   2020-10-14 
02:33:16.000000000 +0200
+++ new/Authlib-0.15.4/authlib/jose/rfc7519/claims.py   2021-06-05 
09:08:48.000000000 +0200
@@ -58,10 +58,10 @@
 
     def _validate_claim_value(self, claim_name):
         option = self.options.get(claim_name)
-        value = self.get(claim_name)
-        if not option or not value:
+        if not option:
             return
 
+        value = self.get(claim_name)
         option_value = option.get('value')
         if option_value and value != option_value:
             raise InvalidClaimError(claim_name)

Reply via email to