diff --git a/asteval-1.0.5.tar.gz b/asteval-1.0.5.tar.gz deleted file mode 100644 index 586044cd22b1f0f370dd27b65f3194c56d808b66..0000000000000000000000000000000000000000 Binary files a/asteval-1.0.5.tar.gz and /dev/null differ diff --git a/asteval-1.0.6.tar.gz b/asteval-1.0.6.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..c6acc34d15854074ffc17d5fdb5caf618f21da9d Binary files /dev/null and b/asteval-1.0.6.tar.gz differ diff --git a/python-asteval.spec b/python-asteval.spec index d7315ecc0ccc9da70346e2864aa1991d83180e36..d4a2d835bc7aafb14418ac3509b5cd6900619af3 100644 --- a/python-asteval.spec +++ b/python-asteval.spec @@ -1,6 +1,6 @@ %global _empty_manifest_terminate_build 0 Name: python-asteval -Version: 1.0.5 +Version: 1.0.6 Release: 1 Summary: Safe, minimalistic evaluator of python expression using ast module License: MIT @@ -92,6 +92,15 @@ mv %{buildroot}/doclist.lst . %{_docdir}/* %changelog +* Sun Jan 26 2025 yaoxin <1024769339@qq.com> - 1.0.6-1 +- Update to 1.0.6: + * drop testing and support for Python3.8, add Python 3.13, change document to reflect this. + * implement safe_getattr and safe_format functions; fix bugs in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage + * make all procedure attributes private to curb access to AST nodes, which can be exploited + * improvements to error messages, including use ast functions to construct better error messages + * remove import of numpy.linalg, as documented + * update doc description for security advisory + * Wed Oct 16 2024 jiangxinyu - 1.0.5-1 - Update package to version 1.0.5 - fix error handling that might result in null exception diff --git a/python-asteval.yaml b/python-asteval.yaml new file mode 100644 index 0000000000000000000000000000000000000000..dd2e303e65c299335510b1986c577133da381d7f --- /dev/null +++ b/python-asteval.yaml @@ -0,0 +1,4 @@ +version_control: github +src_repo: lmfit/asteval +tag_prefix: "^" +separator: "."