pool/bash-git-prompt
SHA256
17
0
Fork 3
Code Issues Pull Requests Activity

use-safe-tempfile.diff: fixes bsc#1247489, an insecure predictable /tmp file usage #1

Manually merged
anag_factory merged 4 commits from michals/bash-git-prompt:leap-16.0 into leap-16.0 2025-11-28 14:29:28 +01:00
Conversation 25 Commits 4 Files Changed 3 +36 -1
michals commented 2025-09-29 20:51:06 +02:00
Contributor
Copy Link
No description provided.
michals added 2 commits 2025-09-29 20:51:07 +02:00
Update .gitattributes 9f11511a28
Add use-safe-tempfile.diff 01a8c81aaf 
Update bash-git-prompt.changes, bash-git-prompt.spec
autogits_workflow_pr_bot requested review from legaldb 2025-09-29 20:51:26 +02:00
autogits_workflow_pr_bot requested review from packagehub-review 2025-09-29 20:51:27 +02:00
packagehub-review commented 2025-09-29 20:51:50 +02:00
Member
Copy Link

Review by packagehub-review represents a group of reviewers: bigironman, lkocman-factory, maxlin_factory, .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @packagehub-review: approve.
To request changes on behalf of the group, create the following comment: @packagehub-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by packagehub-review represents a group of reviewers: bigironman, lkocman-factory, maxlin_factory, . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@packagehub-review: approve`. To request changes on behalf of the group, create the following comment: `@packagehub-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
legaldb commented 2025-09-29 21:04:34 +02:00
Member
Copy Link

Legal review in progress.

Legal review [in progress](https://legaldb.suse.de/reviews/details/467958).
report.md
520 B
packagehub-review requested review from bigironman 2025-10-08 18:46:02 +02:00
packagehub-review requested review from lkocman-factory 2025-10-08 18:46:02 +02:00
packagehub-review requested review from maxlin_factory 2025-10-08 18:46:02 +02:00
packagehub-review requested review from smithfarm 2025-10-08 18:46:02 +02:00
rfrohl commented 2025-10-23 13:42:58 +02:00
First-time contributor
Copy Link

@michals: could you add the CVE reference to the changes file please ?

@michals: could you add the CVE reference to the changes file please ?
legaldb commented 2025-10-27 17:39:36 +01:00
Member
Copy Link

Legal reviewed by dec16180 as acceptable_by_lawyer:

Reviewed ok
Legal reviewed by *dec16180* as [acceptable_by_lawyer](https://legaldb.suse.de/reviews/details/467958): ``` Reviewed ok ```
report.md
520 B
legaldb approved these changes 2025-10-27 17:39:36 +01:00
Dismissed
autogits_workflow_pr_bot requested review from maintenance-release-review 2025-10-27 17:39:54 +01:00
autogits_workflow_pr_bot requested review from opensuse-review 2025-10-27 17:39:54 +01:00
maintenance-release-review commented 2025-10-27 17:40:42 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
opensuse-review commented 2025-10-27 17:49:54 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
oertel commented 2025-10-27 18:29:10 +01:00
First-time contributor
Copy Link

@opensuse-review : approve

LGTM

@opensuse-review : approve LGTM
opensuse-review approved these changes 2025-10-27 18:30:15 +01:00
Dismissed
opensuse-review left a comment
Member
Copy Link

oertel approved a review on behalf of opensuse-review

oertel approved a review on behalf of opensuse-review
michals added 2 commits 2025-11-26 11:15:06 +01:00
Add use-safe-tempfile.diff 01a8c81aaf 
Update bash-git-prompt.changes, bash-git-prompt.spec
Accepting request 1307879 from devel:tools:scm fe735973ec 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1307879
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bash-git-prompt?expand=0&rev=3
autogits_workflow_pr_bot requested review from legaldb 2025-11-26 11:15:16 +01:00
autogits_workflow_pr_bot requested review from opensuse-review 2025-11-26 11:15:16 +01:00
opensuse-review commented 2025-11-26 11:15:34 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
maintenance-release-review commented 2025-11-26 11:20:03 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
michals changed title from use-safe-tempfile.diff: fixes bsc#1247489, an insecure predictable /tmp file usage to WIP: use-safe-tempfile.diff: fixes bsc#1247489, an insecure predictable /tmp file usage 2025-11-26 11:22:17 +01:00
michals commented 2025-11-26 11:22:54 +01:00
Author
Contributor
Copy Link

CVE not referenced, needs updating - https://build.opensuse.org/requests/1320141/changes

CVE not referenced, needs updating - https://build.opensuse.org/requests/1320141/changes
legaldb commented 2025-11-26 11:28:40 +01:00
Member
Copy Link

Legal reviewed as acceptable_by_lawyer:

Accepted because previously reviewed under the same license (468853)
Legal reviewed as [acceptable_by_lawyer](https://legaldb.suse.de/reviews/details/491306): ``` Accepted because previously reviewed under the same license (468853) ```
report.md
366 B
legaldb approved these changes 2025-11-26 11:28:40 +01:00
Dismissed
michals added 2 commits 2025-11-27 11:54:03 +01:00
- add use-safe-tempfile.diff: this fixes bsc#1247489 CVE-2025-61659, an f7b16a1cab 
insecure predictable /tmp file usage in bash-git-prompt.

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/bash-git-prompt?expand=0&rev=8
Accepting request 1320141 from devel:tools:scm 9bd39c9f5d 
OBS-URL: https://build.opensuse.org/request/show/1320141
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bash-git-prompt?expand=0&rev=4
michals dismissed opensuse-review's review 2025-11-27 11:54:03 +01:00
Reason:

New commits pushed, approval review dismissed automatically according to repository settings

michals dismissed legaldb's review 2025-11-27 11:54:03 +01:00
Reason:

New commits pushed, approval review dismissed automatically according to repository settings

autogits_workflow_pr_bot requested review from legaldb 2025-11-27 11:54:32 +01:00
michals changed title from WIP: use-safe-tempfile.diff: fixes bsc#1247489, an insecure predictable /tmp file usage to use-safe-tempfile.diff: fixes bsc#1247489, an insecure predictable /tmp file usage 2025-11-27 11:55:30 +01:00
maintenance-release-review commented 2025-11-27 11:56:40 +01:00
First-time contributor
Copy Link

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @maintenance-release-review: approve.
To request changes on behalf of the group, create the following comment: @maintenance-release-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by maintenance-release-review represents a group of reviewers: abergmann, amattiazzo, bfilho, cmatos, crazybyte, emanuelecappello, gsonnu, maintenance-robot, mauriziogalli, mbozicevic, mimi_vx, mschnitzer, msmeissn, pluskalm, rfrohl, slemke . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@maintenance-release-review: approve`. To request changes on behalf of the group, create the following comment: `@maintenance-release-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
opensuse-review commented 2025-11-27 11:57:57 +01:00
Member
Copy Link

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm .

Do not use standard review interface to review on behalf of the group.
To accept the review on behalf of the group, create the following comment: @opensuse-review: approve.
To request changes on behalf of the group, create the following comment: @opensuse-review: decline followed with lines justifying the decision.
Future edits of the comments are ignored, a new comment is required to change the review state.

Review by opensuse-review represents a group of reviewers: alarrosa, anag, atartamo, bigironman, darix, dimstar, dmach, eroca, jdsn, jengelh, mcalabkova, mstrigl, nkrapp, oertel, RBrownSUSE, simotek, smithfarm . Do **not** use standard review interface to review on behalf of the group. To accept the review on behalf of the group, create the following comment: `@opensuse-review: approve`. To request changes on behalf of the group, create the following comment: `@opensuse-review: decline` followed with lines justifying the decision. Future edits of the comments are ignored, a new comment is required to change the review state.
legaldb commented 2025-11-27 12:12:16 +01:00
Member
Copy Link

Legal reviewed as acceptable_by_lawyer:

Accepted because previously reviewed under the same license (491307)
Legal reviewed as [acceptable_by_lawyer](https://legaldb.suse.de/reviews/details/491494): ``` Accepted because previously reviewed under the same license (491307) ```
report.md
366 B
legaldb approved these changes 2025-11-27 12:12:16 +01:00
rfrohl commented 2025-11-27 12:34:26 +01:00
First-time contributor
Copy Link

@maintenance-release-review: approve
merge ok

@maintenance-release-review: approve merge ok
maintenance-release-review approved these changes 2025-11-27 12:37:09 +01:00
maintenance-release-review left a comment
First-time contributor
Copy Link

rfrohl approved a review on behalf of maintenance-release-review

rfrohl approved a review on behalf of maintenance-release-review
oertel commented 2025-11-27 13:46:04 +01:00
First-time contributor
Copy Link

@opensuse-review : approve

LGTM

@opensuse-review : approve LGTM
oertel commented 2025-11-27 13:46:05 +01:00
First-time contributor
Copy Link

merge ok

merge ok
opensuse-review approved these changes 2025-11-27 13:49:23 +01:00
opensuse-review left a comment
Member
Copy Link

oertel approved a review on behalf of opensuse-review

oertel approved a review on behalf of opensuse-review
smithfarm approved these changes 2025-11-27 16:21:57 +01:00
smithfarm left a comment
Owner
Copy Link

lgtm

lgtm
eroca removed review request for packagehub-review 2025-11-27 16:25:24 +01:00
eroca removed review request for maxlin_factory 2025-11-27 16:25:26 +01:00
eroca removed review request for bigironman 2025-11-27 16:25:27 +01:00
eroca removed review request for lkocman-factory 2025-11-27 16:25:29 +01:00
eroca commented 2025-11-27 16:26:09 +01:00
Owner
Copy Link

packagehub-review is obsolete since leap-16.0 went in maintenance mode, cleaned up review requests.

packagehub-review is obsolete since leap-16.0 went in maintenance mode, cleaned up review requests.
anag_factory manually merged commit 9bd39c9f5d into leap-16.0 2025-11-28 14:29:28 +01:00
Sign in to join this conversation.
Reviewers
No Reviewers
legaldb
maintenance-release-review
opensuse-review
smithfarm
Labels
Clear labels
legaldb
Critical Priority
Critical legaldb priority
Archived
legaldb
High Priority
2
High legaldb priority
legaldb
Normal Priority
1
Normal legaldb priority
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
adamm_super adrianSuSE autobuild-owner autobuild-review autogits_workflow_pr_bot bigironman dirkmueller eroca factory_bot gitea_test legaldb lkocman-factory maxlin_factory opensuse-review packagehub-review smithfarm
No Assignees
9 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: pool/bash-git-prompt#1
Delete Branch "michals/bash-git-prompt:leap-16.0"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?