commit python-markdown2 for openSUSE:Factory
Hello community, here is the log from the commit of package python-markdown2 for openSUSE:Factory checked in at 2020-08-18 15:11:47 Comparing /work/SRC/openSUSE:Factory/python-markdown2 (Old) and /work/SRC/openSUSE:Factory/.python-markdown2.new.3399 (New) Package is "python-markdown2" Tue Aug 18 15:11:47 2020 rev:6 rq:827270 version:2.3.9 Changes: --- /work/SRC/openSUSE:Factory/python-markdown2/python-markdown2.changes 2020-05-08 23:07:08.422081484 +0200 +++ /work/SRC/openSUSE:Factory/.python-markdown2.new.3399/python-markdown2.changes 2020-08-18 15:11:55.196062254 +0200 @@ -1,0 +2,11 @@ +Mon Aug 17 07:51:19 UTC 2020 - Dirk Mueller + +- update to 2.3.9: + - [pull #335] Added header support for wiki tables + - [pull #336] Reset _toc when convert is run + - [pull #353] XSS fix + - [pull #350] XSS fix +- remove 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch, + 0002-Fixed-code-highlighting-unit-tests.patch (upstream) + +--- Old: 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch 0002-Fixed-code-highlighting-unit-tests.patch markdown2-2.3.8.tar.gz New: markdown2-2.3.9.tar.gz Other differences: -- ++ python-markdown2.spec ++ --- /var/tmp/diff_new_pack.w4bxe4/_old 2020-08-18 15:11:55.772062492 +0200 +++ /var/tmp/diff_new_pack.w4bxe4/_new 2020-08-18 15:11:55.776062494 +0200 @@ -18,15 +18,13 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-markdown2 -Version:2.3.8 +Version:2.3.9 Release:0 Summary:A Python implementation of Markdown License:MIT Group: Development/Languages/Python URL:https://github.com/trentm/python-markdown2 Source: https://files.pythonhosted.org/packages/source/m/markdown2/markdown2-%{version}.tar.gz -Patch0: 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch -Patch1: 0002-Fixed-code-highlighting-unit-tests.patch BuildRequires: %{python_module pygments} BuildRequires: %{python_module setuptools} BuildRequires: fdupes @@ -46,8 +44,6 @@ %prep %setup -q -n markdown2-%{version} -%patch0 -p1 -%patch1 -p1 %build %python_build ++ markdown2-2.3.8.tar.gz -> markdown2-2.3.9.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.8/CHANGES.md new/markdown2-2.3.9/CHANGES.md --- old/markdown2-2.3.8/CHANGES.md 2019-05-29 20:55:44.0 +0200 +++ new/markdown2-2.3.9/CHANGES.md 2020-05-12 02:07:43.0 +0200 @@ -1,5 +1,13 @@ # python-markdown2 Changelog +## python-markdown2 2.3.9 + +- [pull #335] Added header support for wiki tables +- [pull #336] Reset _toc when convert is run +- [pull #353] XSS fix +- [pull #350] XSS fix + + ## python-markdown2 2.3.8 - [pull #317] Temporary fix to issue #150 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.8/CONTRIBUTORS.txt new/markdown2-2.3.9/CONTRIBUTORS.txt --- old/markdown2-2.3.8/CONTRIBUTORS.txt2019-05-28 19:49:01.0 +0200 +++ new/markdown2-2.3.9/CONTRIBUTORS.txt2020-05-04 19:00:34.0 +0200 @@ -42,3 +42,5 @@ Alex Elzenaar (github.com/aelzenaar) Francisco Saldaña (github.com/FrankSalad) Shivam Kumar Jha (github.com/thealphadollar) +ryanvilbrandt (github.com/ryanvilbrandt) +Gareth Simpson (github.com/xurble) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.8/PKG-INFO new/markdown2-2.3.9/PKG-INFO --- old/markdown2-2.3.8/PKG-INFO2019-05-29 20:55:53.0 +0200 +++ new/markdown2-2.3.9/PKG-INFO2020-05-12 02:07:55.0 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: markdown2 -Version: 2.3.8 +Version: 2.3.9 Summary: A fast and complete Python implementation of Markdown Home-page: https://github.com/trentm/python-markdown2 Author: Trent Mick diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.8/lib/markdown2.egg-info/PKG-INFO new/markdown2-2.3.9/lib/markdown2.egg-info/PKG-INFO --- old/markdown2-2.3.8/lib/markdown2.egg-info/PKG-INFO 2019-05-29 20:55:52.0 +0200 +++ new/markdown2-2.3.9/lib/markdown2.egg-info/PKG-INFO 2020-05-12 02:07:55.0 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: markdown2 -Version: 2.3.8 +Version: 2.3.9 Summary: A fast and complete Python implementation of Markdown Home-page: https://github.com/trentm/python-markdown2 Author: Trent Mick diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-
commit python-markdown2 for openSUSE:Factory
Hello community, here is the log from the commit of package python-markdown2 for openSUSE:Factory checked in at 2020-05-08 23:07:02 Comparing /work/SRC/openSUSE:Factory/python-markdown2 (Old) and /work/SRC/openSUSE:Factory/.python-markdown2.new.2738 (New) Package is "python-markdown2" Fri May 8 23:07:02 2020 rev:5 rq:801323 version:2.3.8 Changes: --- /work/SRC/openSUSE:Factory/python-markdown2/python-markdown2.changes 2019-07-24 20:35:45.438572624 +0200 +++ /work/SRC/openSUSE:Factory/.python-markdown2.new.2738/python-markdown2.changes 2020-05-08 23:07:08.422081484 +0200 @@ -1,0 +2,8 @@ +Thu May 7 14:35:38 UTC 2020 - Petr Cervinka + +- Add patch to fix unsanitized input for cross-site scripting (boo#1171379) + 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch +- Add patch to fix faling unit test + 0002-Fixed-code-highlighting-unit-tests.patch + +--- New: 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch 0002-Fixed-code-highlighting-unit-tests.patch Other differences: -- ++ python-markdown2.spec ++ --- /var/tmp/diff_new_pack.XSaJnC/_old 2020-05-08 23:07:09.610083911 +0200 +++ /var/tmp/diff_new_pack.XSaJnC/_new 2020-05-08 23:07:09.610083911 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-markdown2 # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -25,6 +25,8 @@ Group: Development/Languages/Python URL:https://github.com/trentm/python-markdown2 Source: https://files.pythonhosted.org/packages/source/m/markdown2/markdown2-%{version}.tar.gz +Patch0: 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch +Patch1: 0002-Fixed-code-highlighting-unit-tests.patch BuildRequires: %{python_module pygments} BuildRequires: %{python_module setuptools} BuildRequires: fdupes @@ -44,6 +46,8 @@ %prep %setup -q -n markdown2-%{version} +%patch0 -p1 +%patch1 -p1 %build %python_build ++ 0001-Fix-for-issue-348-incomplete-tags-with-punctuation-a.patch ++ >From 9144d0fc5d5249cc4d81287ee79091806e6dde52 Mon Sep 17 00:00:00 2001 From: Gareth Simpson Date: Fri, 1 May 2020 19:31:21 +0100 Subject: [PATCH] Fix for issue 348 - incomplete tags with punctuation after as part of the tag name are a source of XSS --- lib/markdown2.py | 2 +- test/tm-cases/issue348_incomplete_tag.html | 1 + test/tm-cases/issue348_incomplete_tag.opts | 1 + test/tm-cases/issue348_incomplete_tag.text | 1 + 4 files changed, 4 insertions(+), 1 deletion(-) create mode 100644 test/tm-cases/issue348_incomplete_tag.html create mode 100644 test/tm-cases/issue348_incomplete_tag.opts create mode 100644 test/tm-cases/issue348_incomplete_tag.text diff --git a/lib/markdown2.py b/lib/markdown2.py index 3a5d5d9..636bf07 100755 --- a/lib/markdown2.py +++ b/lib/markdown2.py @@ -2164,7 +2164,7 @@ class Markdown(object): text = self._naked_gt_re.sub('>', text) return text -_incomplete_tags_re = re.compile("<(/?\w+[\s/]+?)") +_incomplete_tags_re = re.compile("<(/?\w+?(?!://).?[\s/]+?)") def _encode_incomplete_tags(self, text): if self.safe_mode not in ("replace", "escape"): diff --git a/test/tm-cases/issue348_incomplete_tag.html b/test/tm-cases/issue348_incomplete_tag.html new file mode 100644 index 000..46059cc --- /dev/null +++ b/test/tm-cases/issue348_incomplete_tag.html @@ -0,0 +1 @@ +
commit python-markdown2 for openSUSE:Factory
Hello community, here is the log from the commit of package python-markdown2 for openSUSE:Factory checked in at 2019-07-24 20:35:44 Comparing /work/SRC/openSUSE:Factory/python-markdown2 (Old) and /work/SRC/openSUSE:Factory/.python-markdown2.new.4126 (New) Package is "python-markdown2" Wed Jul 24 20:35:44 2019 rev:4 rq:718111 version:2.3.8 Changes: --- /work/SRC/openSUSE:Factory/python-markdown2/python-markdown2.changes 2019-04-08 20:53:24.338562610 +0200 +++ /work/SRC/openSUSE:Factory/.python-markdown2.new.4126/python-markdown2.changes 2019-07-24 20:35:45.438572624 +0200 @@ -1,0 +2,11 @@ +Wed Jul 24 08:02:38 UTC 2019 - Tomáš Chvátal + +- Update to 2.3.8: + * [pull #317] Temporary fix to issue #150 + * [pull #319] Stop XML escaping the body of a link + * [pull #322] Don't auto link patterns surrounded by triple quotes + * [pull #324] Add class configurability to the enclosing tag + * [pull #328] Accept [X] as marked task +- Drop merged patch fix-build.patch + +--- Old: fix-build.patch markdown2-2.3.7.tar.gz New: markdown2-2.3.8.tar.gz Other differences: -- ++ python-markdown2.spec ++ --- /var/tmp/diff_new_pack.uIujp1/_old 2019-07-24 20:35:45.906572572 +0200 +++ /var/tmp/diff_new_pack.uIujp1/_new 2019-07-24 20:35:45.906572572 +0200 @@ -17,16 +17,14 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} -%bcond_without test Name: python-markdown2 -Version:2.3.7 +Version:2.3.8 Release:0 Summary:A Python implementation of Markdown License:MIT Group: Development/Languages/Python URL:https://github.com/trentm/python-markdown2 Source: https://files.pythonhosted.org/packages/source/m/markdown2/markdown2-%{version}.tar.gz -Patch0: fix-build.patch BuildRequires: %{python_module pygments} BuildRequires: %{python_module setuptools} BuildRequires: fdupes @@ -46,7 +44,6 @@ %prep %setup -q -n markdown2-%{version} -%patch0 -p1 %build %python_build ++ markdown2-2.3.7.tar.gz -> markdown2-2.3.8.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.7/CHANGES.md new/markdown2-2.3.8/CHANGES.md --- old/markdown2-2.3.7/CHANGES.md 2018-12-05 19:55:15.0 +0100 +++ new/markdown2-2.3.8/CHANGES.md 2019-05-29 20:55:44.0 +0200 @@ -1,5 +1,14 @@ # python-markdown2 Changelog +## python-markdown2 2.3.8 + +- [pull #317] Temporary fix to issue #150 +- [pull #319] Stop XML escaping the body of a link +- [pull #322] Don't auto link patterns surrounded by triple quotes +- [pull #324] Add class configurability to the enclosing tag +- [pull #328] Accept [X] as marked task + + ## python-markdown2 2.3.7 - [pull #306] Drop support for legacy Python versions diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.7/CONTRIBUTORS.txt new/markdown2-2.3.8/CONTRIBUTORS.txt --- old/markdown2-2.3.7/CONTRIBUTORS.txt2018-09-17 18:02:01.0 +0200 +++ new/markdown2-2.3.8/CONTRIBUTORS.txt2019-05-28 19:49:01.0 +0200 @@ -38,3 +38,7 @@ Hassan Magdy Saad (github.com/hmagdy) Christian Klus (github.com/kluchrj) Tsuyoshi Hombashi (github.com/thombashi) +Sym Roe (github.com/symroe) +Alex Elzenaar (github.com/aelzenaar) +Francisco Saldaña (github.com/FrankSalad) +Shivam Kumar Jha (github.com/thealphadollar) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.7/PKG-INFO new/markdown2-2.3.8/PKG-INFO --- old/markdown2-2.3.7/PKG-INFO2018-12-05 19:57:52.0 +0100 +++ new/markdown2-2.3.8/PKG-INFO2019-05-29 20:55:53.0 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: markdown2 -Version: 2.3.7 +Version: 2.3.8 Summary: A fast and complete Python implementation of Markdown Home-page: https://github.com/trentm/python-markdown2 Author: Trent Mick diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/markdown2-2.3.7/lib/markdown2.egg-info/PKG-INFO new/markdown2-2.3.8/lib/markdown2.egg-info/PKG-INFO --- old/markdown2-2.3.7/lib/markdown2.egg-info/PKG-INFO 2018-12-05 19:57:52.0 +0100 +++ new/markdown2-2.3.8/lib/markdown2.egg-info/PKG-INFO 2019-05-29 20:55:52.0 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 1.1 Name: markdown2 -Version: 2.3.7 +Version: 2.3.8 Summary: A fast and complete Python implementation of Markdown Home-page: https://github.com/trentm/python-markdown2 Author: Trent Mick diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--
commit python-markdown2 for openSUSE:Factory
Hello community, here is the log from the commit of package python-markdown2 for openSUSE:Factory checked in at 2019-04-08 20:53:19 Comparing /work/SRC/openSUSE:Factory/python-markdown2 (Old) and /work/SRC/openSUSE:Factory/.python-markdown2.new.3908 (New) Package is "python-markdown2" Mon Apr 8 20:53:19 2019 rev:3 rq:691804 version:2.3.7 Changes: --- /work/SRC/openSUSE:Factory/python-markdown2/python-markdown2.changes 2018-07-31 16:01:06.215720043 +0200 +++ /work/SRC/openSUSE:Factory/.python-markdown2.new.3908/python-markdown2.changes 2019-04-08 20:53:24.338562610 +0200 @@ -1,0 +2,25 @@ +Fri Apr 5 12:17:28 UTC 2019 - Tomáš Chvátal + +- Update to 2.3.7: + [pull #282] Add TOC depth option + [pull #283] Fix to add TOC html to output via CLI + [pull #284] Do not remove anchors in safe_mode + [pull #288] fixing cuddled-lists with a single list item + [pull #292] Fix Wrong rendering of last list element + [pull #295] link-patterns fix + [pull #300] Replace a deprecated method + [pull #301] DeprecationWarning: invalid escape sequence + [pull #302] Fix "make test" in Python 3 + [pull #303] Fix CVE-2018-5773 + [pull #306] Drop support for legacy Python versions + [pull #307] Fix syntax highlighting test cases that depend on Pygments output + [pull #308] Add support for Python 3.7 + [pull #304] Add Wheel package support + [pull #312] Fix toc_depth initialization regression + [pull #315] XSS fix +- Drop merged patch: + * disable-failing-tests.patch +- Add patch from upstream to fix build command: + * fix-build.patch + +--- Old: disable-failing-tests.patch markdown2-2.3.5.zip New: fix-build.patch markdown2-2.3.7.tar.gz Other differences: -- ++ python-markdown2.spec ++ --- /var/tmp/diff_new_pack.OCyPPp/_old 2019-04-08 20:53:25.106563175 +0200 +++ /var/tmp/diff_new_pack.OCyPPp/_new 2019-04-08 20:53:25.122563186 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-markdown2 # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,23 +12,21 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # %{?!python_module:%define python_module() python-%{**} python3-%{**}} %bcond_without test Name: python-markdown2 -Version:2.3.5 +Version:2.3.7 Release:0 Summary:A Python implementation of Markdown License:MIT Group: Development/Languages/Python -URL:https://pypi.python.org/pypi/markdown2 -Source: https://files.pythonhosted.org/packages/source/m/markdown2/markdown2-%{version}.zip -# PATCH-FIX-UPSTREAM disable-failing-tests.patch https://github.com/trentm/python-markdown2/issues/281 -Patch0: disable-failing-tests.patch -BuildRequires: %{python_module base} +URL:https://github.com/trentm/python-markdown2 +Source: https://files.pythonhosted.org/packages/source/m/markdown2/markdown2-%{version}.tar.gz +Patch0: fix-build.patch BuildRequires: %{python_module pygments} BuildRequires: %{python_module setuptools} BuildRequires: fdupes @@ -49,7 +47,6 @@ %prep %setup -q -n markdown2-%{version} %patch0 -p1 -sed -i -e '/^#!\//, 1d' lib/markdown2.py %build %python_build @@ -57,13 +54,11 @@ %install %python_install %python_clone -a %{buildroot}%{_bindir}/markdown2 -%python_expand %fdupes %{buildroot}%{$python_bin_suffix} +%python_expand %fdupes %{buildroot}%{$python_sitelib} %check pushd test -%{python_expand export PYTHONPATH=%{buildroot}%{$python_sitelib} -%python_exec test.py -- -knownfailure -} +%python_expand PYTHONPATH=%{buildroot}%{$python_sitelib} $python test.py -- -knownfailure popd %post ++ fix-build.patch ++ >From 7f8a48b504fc20fa5bc5016f9bc96f5cc06cf891 Mon Sep 17 00:00:00 2001 From: Nicholas Serra Date: Tue, 5 Mar 2019 14:45:01 -0500 Subject: [PATCH] Remove build alias fixes #323 --- setup.cfg| 3 --- tools/cutarelease.py | 2 +- 2 files changed, 1 insertion(+), 4 deletions(-) Index: markdown2-2.3.7/setup.cfg === --- markdown2-2.3.7.orig/setup.cfg +++ markdown2-2.3.7/setup.cfg @@ -1,6 +1,3 @@ -[aliases] -build = sdist bdist_wheel - [wheel] universal = 1
commit python-markdown2 for openSUSE:Factory
Hello community, here is the log from the commit of package python-markdown2 for openSUSE:Factory checked in at 2018-07-31 16:01:03 Comparing /work/SRC/openSUSE:Factory/python-markdown2 (Old) and /work/SRC/openSUSE:Factory/.python-markdown2.new (New) Package is "python-markdown2" Tue Jul 31 16:01:03 2018 rev:2 rq:626381 version:2.3.5 Changes: --- /work/SRC/openSUSE:Factory/python-markdown2/python-markdown2.changes 2018-06-27 10:20:11.210735319 +0200 +++ /work/SRC/openSUSE:Factory/.python-markdown2.new/python-markdown2.changes 2018-07-31 16:01:06.215720043 +0200 @@ -1,0 +2,5 @@ +Sun Jul 29 12:03:40 UTC 2018 - jeng...@inai.de + +- Ensure accuracy of description. + +--- Other differences: -- ++ python-markdown2.spec ++ --- /var/tmp/diff_new_pack.fbIx1b/_old 2018-07-31 16:01:06.747720947 +0200 +++ /var/tmp/diff_new_pack.fbIx1b/_new 2018-07-31 16:01:06.751720954 +0200 @@ -21,7 +21,7 @@ Name: python-markdown2 Version:2.3.5 Release:0 -Summary:A fast and complete Python implementation of Markdown +Summary:A Python implementation of Markdown License:MIT Group: Development/Languages/Python URL:https://pypi.python.org/pypi/markdown2 @@ -40,8 +40,8 @@ %python_subpackages %description -Markdown2 is a fast and complete Python implementation of Markdown. -It was written to closely match the behaviour of the original +Markdown2 is a Python implementation of Markdown. +It closely matches the behaviour of the original Perl-implemented Markdown.pl. Markdown2 also comes with a number of extensions (called "extras") for things like syntax coloring, tables, header-ids.