From 3d817f60a592f431879ee651e5c61b2195f1bc85d5c5ab9c081b636bea96c844 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Thu, 15 Apr 2021 13:17:15 +0000 Subject: [PATCH] Accepting request 885189 from home:susnux:branches:GNOME:Factory - Update to version 0.3.1: + Disallow symlinks in parents completely when extracting ( CVE-2021-28650 ) + Drop recursive delete on failure to prevent data loss + Add back RAR support OBS-URL: https://build.opensuse.org/request/show/885189 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gnome-autoar?expand=0&rev=15 --- gnome-autoar-0.3.0.tar.xz | 3 --- gnome-autoar-0.3.1.tar.xz | 3 +++ gnome-autoar.changes | 9 +++++++++ gnome-autoar.spec | 2 +- 4 files changed, 13 insertions(+), 4 deletions(-) delete mode 100644 gnome-autoar-0.3.0.tar.xz create mode 100644 gnome-autoar-0.3.1.tar.xz diff --git a/gnome-autoar-0.3.0.tar.xz b/gnome-autoar-0.3.0.tar.xz deleted file mode 100644 index dbc3d52..0000000 --- a/gnome-autoar-0.3.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f2c112c0120cca2bf5a82c5b0ac8cba90ce10d21fec78f50a3bc513fdd64586b -size 297072 diff --git a/gnome-autoar-0.3.1.tar.xz b/gnome-autoar-0.3.1.tar.xz new file mode 100644 index 0000000..3a58998 --- /dev/null +++ b/gnome-autoar-0.3.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:0e78713e6f0de339fdee16bab82753ae290fe80fa7b4ba6e3db8c1465b81d0f8 +size 297904 diff --git a/gnome-autoar.changes b/gnome-autoar.changes index ce983e5..ee01b0b 100644 --- a/gnome-autoar.changes +++ b/gnome-autoar.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Wed Apr 14 00:40:44 UTC 2021 - Ferdinand Thiessen + +- Update to version 0.3.1: + + Disallow symlinks in parents completely when extracting + ( CVE-2021-28650 ) + + Drop recursive delete on failure to prevent data loss + + Add back RAR support + ------------------------------------------------------------------- Fri Feb 12 17:19:47 UTC 2021 - Bjørn Lie diff --git a/gnome-autoar.spec b/gnome-autoar.spec index 4a374a7..0e3bf2c 100644 --- a/gnome-autoar.spec +++ b/gnome-autoar.spec @@ -17,7 +17,7 @@ Name: gnome-autoar -Version: 0.3.0 +Version: 0.3.1 Release: 0 Summary: Automatic archives creating and extracting library License: LGPL-2.0-or-later