pool/librepo
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 914467 from home:qkzhu:branches:system:packagemanager:dnf

Browse Source 
Sync SLE changes to factory to do cross Service-Pack merges for SLE

OBS-URL: https://build.opensuse.org/request/show/914467
OBS-URL: https://build.opensuse.org/package/show/system:packagemanager:dnf/librepo?expand=0&rev=39
This commit is contained in:
Neal Gompa 2021-08-27 02:28:06 +00:00 committed by Git OBS Bridge
parent d59a963b9a
commit de1325e54c
2 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
librepo.changes
View File

@ -34,6 +34,14 @@ Sat Aug 22 20:18:17 UTC 2020 - Neal Gompa <ngompa13@gmail.com>
- Upgrade to 1.12.1 - Upgrade to 1.12.1
+ Validate path read from repomd.xml (rh#1868639, CVE-2020-14352) + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
(boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1
-------------------------------------------------------------------
Thu Aug 20 10:30:12 UTC 2020 - Christian Vögl <christian.voegl@suse.com>
- Add validate_path.patch to prevent directory traversal attacks
(boo#1175475, CVE-2020-14352)
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Jul 7 10:38:49 UTC 2020 - Neal Gompa <ngompa13@gmail.com> Tue Jul 7 10:38:49 UTC 2020 - Neal Gompa <ngompa13@gmail.com>

6
librepo.spec
View File

@ -1,7 +1,7 @@
# #
# spec file for package librepo # spec file for package librepo
# #
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2021 SUSE LLC
# Copyright (c) 2020-2021 Neal Gompa <ngompa13@gmail.com>. # Copyright (c) 2020-2021 Neal Gompa <ngompa13@gmail.com>.
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
@ -51,9 +51,9 @@ BuildRequires: doxygen
BuildRequires: gpgme-devel BuildRequires: gpgme-devel
BuildRequires: pkgconfig(check) BuildRequires: pkgconfig(check)
BuildRequires: pkgconfig(glib-2.0) >= 2.26.0 BuildRequires: pkgconfig(glib-2.0) >= 2.26.0
BuildRequires: pkgconfig(libcrypto)
BuildRequires: pkgconfig(libcurl) >= 7.52.0 BuildRequires: pkgconfig(libcurl) >= 7.52.0
BuildRequires: pkgconfig(libxml-2.0) BuildRequires: pkgconfig(libxml-2.0)
BuildRequires: pkgconfig(libcrypto)
BuildRequires: pkgconfig(openssl) BuildRequires: pkgconfig(openssl)
%if %{with zchunk} %if %{with zchunk}
BuildRequires: pkgconfig(zck) >= 0.9.11 BuildRequires: pkgconfig(zck) >= 0.9.11
@ -88,8 +88,8 @@ Summary: Python 3 bindings for the librepo library
Group: Development/Libraries/Python Group: Development/Libraries/Python
BuildRequires: python3-devel BuildRequires: python3-devel
%if %{with tests} %if %{with tests}
BuildRequires: python3-gpg
BuildRequires: python3-Flask BuildRequires: python3-Flask
BuildRequires: python3-gpg
BuildRequires: python3-requests BuildRequires: python3-requests
%endif %endif
BuildRequires: python3-Sphinx BuildRequires: python3-Sphinx