fix: backport CVE-2026-59923-python-mistune-AtomGit

Open

fix: backport CVE-2026-59923 #55

易大夫Add on 1 day agoMerged fromsun_jie001/python-mistune： cve-2026-59923-master into src-openeuler/python-mistune： openEuler-24.03-LTS-SP3

fix: backport CVE-2026-59923 #55

Open

易大夫Add on 1 day ago

Merged fromsun_jie001/python-mistune cve-2026-59923-masterintosrc-openeuler/python-mistune openEuler-24.03-LTS-SP3

Total: 4 files changed+63-32

Dmistune-0.8.4.tar.gz+0-0

Binary files do not support preview

Dmistune-2.0.4.tar.gz+0-0

Binary files do not support preview

Amistune-3.4.0.tar.gz+0-0

Binary files do not support preview

Mpython-mistune.spec+63-32

	@@ -1,11 +1,12 @@
		1	+%global pypi_name mistune
		2	+
1	Name: python-mistune	3	Name: python-mistune
2	-Version: 2.0.4	4	+Version: 3.4.0
3	-Release: 2	5	+Release: 1
4	Summary: A Python Markdown Parser	6	Summary: A Python Markdown Parser
5	License: BSD-3-Clause	7	License: BSD-3-Clause
6	URL: https://github.com/lepture/mistune	8	URL: https://github.com/lepture/mistune
7	-Source0: %url/archive/v%{version}/mistune-%{version}.tar.gz	9	+Source0: https://files.pythonhosted.org/packages/96/eb/749a4e69bf7396e751ae37444abe997eff2254e695a8095b84d1c89c1181/mistune-3.4.0.tar.gz
8	-Source1: %url/archive/v%{version}/mistune-0.8.4.tar.gz
9		10
10	BuildArch: noarch	11	BuildArch: noarch
11		12
	@@ -30,52 +31,82 @@ The python-mistune package is a fast yet powerful Python Markdown
30	parser with renderers and plugins, compatible with sane CommonMark	31	parser with renderers and plugins, compatible with sane CommonMark
31	rules.	32	rules.
32		33
33	-%package -n python3-mistune-v1
34	-Summary: A Python Markdown Parser old version
35	-
36	-%description -n python3-mistune-v1
37	-V1 version(0.8.4) for python-mistune package
38	-
39	%prep	34	%prep
40	%autosetup -n mistune-%{version} -p1	35	%autosetup -n mistune-%{version} -p1
41	-tar xvf %{SOURCE1} -C .
42	-mv mistune-0.8.4 mistune_v1
43	-mv ./mistune_v1/mistune.py ./mistune_v1/mistune_v1.py
44	-sed -i 's/mistune/mistune_v1/g' ./mistune_v1/*.py
45	-sed -i 's/mistune/mistune_v1/g' ./mistune_v1/*.cfg
46	-sed -i 's/mistune/mistune_v1/g' ./mistune_v1/PKG-INFO
47	-sed -i 's/mistune/mistune_v1/g' ./mistune_v1/README.rst
48	-sed -i 's/mistune/mistune_v1/g' ./mistune_v1/tests/*.py
49		36
50	%build	37	%build
51	-mkdir build
52	%pyproject_build	38	%pyproject_build
53	-cd %{_builddir}/mistune-%{version}/mistune_v1
54	-%pyproject_build
55	-cp ./build/*.whl %{_builddir}/mistune-%{version}/build/
56		39
57	%install	40	%install
58	%pyproject_install	41	%pyproject_install
59		42
60	%check	43	%check
61	-cd %{_builddir}/mistune-%{version}/mistune_v1
62	-%pytest
63	-cd %{_builddir}/mistune-%{version}
64	-rm -rf ./mistune_v1/tests
65	%pytest	44	%pytest
66		45
67	%files -n python3-mistune	46	%files -n python3-mistune
68	%doc LICENSE README.rst	47	%doc LICENSE README.rst
69	%{python3_sitelib}/mistune	48	%{python3_sitelib}/mistune
70	%{python3_sitelib}/mistune-*.dist-info	49	%{python3_sitelib}/mistune-*.dist-info
71	-	50	+%{_bindir}/mistune
72	-%files -n python3-mistune-v1
73	-%doc LICENSE README.rst
74	-%{python3_sitelib}/mistune_v1.py
75	-%{python3_sitelib}/__pycache__/mistune_v1.*.pyc
76	-%{python3_sitelib}/mistune_v1-*.dist-info
77		51
78	%changelog	52	%changelog
		53	+* Tue Oct 20 2026 zhangyulongkylinos <zhangyulong@kylinos.cn> - 3.4.0-1
		54	+- Update to 3.4.0
		55	+
		56	+* Wed Jul 22 2026 zhangchaorui <zhangchaorui@kylinos.cn> - 3.3.4-1
		57	+- Update to 3.3.4
		58	+
		59	+* Tue Jul 14 2026 lilu_ll <lilu@kylinos.cn> - 3.3.3-1
		60	+- Update package to version 3.3.3
		61	+ * Set prev token in render_list_item and add block_text to ignore_blocks
		62	+ * Improve nested bracket link input
		63	+ * Escape literal emphasis markers in MarkdownRenderer
		64	+
		65	+* Tue Jul 14 2026 Ge Wang <wang__ge@126.com> - 3.3.2-2
		66	+- Remove v1 package release
		67	+
		68	+* Wed Jun 24 2026 guochao <guochao@kylinos.cn> - 3.3.2-1
		69	+- Update version to 3.3.2
		70	+ *fix(image): validate figure width option
		71	+ *fix(toc): avoid generated id collisions
		72	+ *fix(directive): use correct file path for include directive
		73	+ *fix: resolve mypy issues for python 3.8 and 3.9+
		74	+
		75	+* Wed May 06 2026 YangengLiu <dev01202@linx-info.com> - 3.2.1-1
		76	+- update version to 3.2.1
		77	+ * Resolve Windows compatibility issues in file inclusion and tests.
		78	+ * fix: Escape html text.
		79	+ * fix: Update link reference.
		80	+ * fix: Handle escaped dollar signs in inline math.
		81	+ * fix: Escape id of toc.
		82	+ * fix: Escape id of headings.
		83	+ * Remove double-encoding of image alt text.
		84	+ * Escape xml for math plugin.
		85	+ * Use strict regex for image's height and width.
		86	+
		87	+* Wed Dec 24 2025 YangengLiu <dev01202@linx-info.com> - 3.2.0-1
		88	+- update version to 3.2.0
		89	+ * Support footnotes that start on the next line.
		90	+ * Properly handle code blocks inside footnotes.
		91	+ * Support python 3.14
		92	+ * Render ref links and footnotes in footnotes.
		93	+ * Render ref links in TOC.
		94	+ * Update typing for mypy upgrades.
		95	+ * Render correct html for footnotes.
		96	+
		97	+* Tue Sep 30 2025 jinshuaiyu <jinshuaiyu@kylinos.cn> - 3.1.4-1
		98	+- Update package with version 3.1.4
		99	+- Add fenced directive break rule in list parser
		100	+- Prevent remove unicode whitespace when parsing atx heading
		101	+
		102	+* Sun Apr 20 2025 Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.1.3-1
		103	+- Update package with version 3.1.3
		104	+ Announce supports for python 3.12 and 3.13
		105	+ Add typing-extensions into dependencies
		106	+ Add py.typed for mypy
		107	+ Add more type hints
		108	+ Improve on parsing list. Make it possible to customize list regex
		109	+
79	* Fri Nov 10 2023 Dongxing Wang <dxwangk@isoftstone.com> - 2.0.4-2	110	* Fri Nov 10 2023 Dongxing Wang <dxwangk@isoftstone.com> - 2.0.4-2
80	- Add v1 package release	111	- Add v1 package release
81		112