python/python-bugzilla
SHA256
14
0
Fork 0
forked from pool/python-bugzilla
Code Pull Requests Activity

Accepting request 1113660 from devel:languages:python

Browse Source 
- Fix API Key leak (bsc#1215718)
- Add:
  * 188-fix-api-key-leak.diff

OBS-URL: https://build.opensuse.org/request/show/1113660
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-bugzilla?expand=0&rev=33
This commit is contained in:
Ana Guerrero
2023-09-26 20:00:30 +00:00
committed by Git OBS Bridge
parent efe4532725 d1ea8ac21a
commit b28a5239f9
3 changed files with 34 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
188-fix-api-key-leak.diff Normal file
View File

@@ -0,0 +1,23 @@
--- a/bugzilla/_session.py 2021-10-05 22:49:16.000000000 +0200
+++ b/bugzilla/_session.py 2023-09-25 17:22:39.763856790 +0200
@@ -97,14 +97,14 @@
if "timeout" not in kwargs:
kwargs["timeout"] = timeout
- response = self._session.request(*args, **kwargs)
+ try:
+ response = self._session.request(*args, **kwargs)
- if self._is_xmlrpc:
- # Yes this still appears to matter for properly decoding unicode
- # code points in bugzilla.redhat.com content
- response.encoding = "UTF-8"
+ if self._is_xmlrpc:
+ # Yes this still appears to matter for properly decoding unicode
+ # code points in bugzilla.redhat.com content
+ response.encoding = "UTF-8"
- try:
response.raise_for_status()
except Exception as e:
# Scrape the api key out of the returned exception string

7
python-bugzilla.changes
View File

@@ -1,3 +1,10 @@
-------------------------------------------------------------------
Mon Sep 25 14:57:10 UTC 2023 - Julio González Gil <jgonzalez@suse.com>
- Fix API Key leak (bsc#1215718)
- Add:
* 188-fix-api-key-leak.diff
-------------------------------------------------------------------
Wed Dec 21 08:41:46 UTC 2022 - Julio González Gil <jgonzalez@suse.com>

5
python-bugzilla.spec
View File

@@ -1,7 +1,7 @@
#
# spec file for package python-bugzilla
#
# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -29,6 +29,9 @@ Source: https://files.pythonhosted.org/packages/source/p/python-bugzilla
# PATCH-FIX-UPSTREAM 106-basic-auth.diff bsc#1098219 mcepl@suse.com
# Fix basic authentication on bugzilla.suse.com
Patch0: 106-basic-auth.diff
# PATCH-FIX-UPSTREAM pending https://github.com/python-bugzilla/python-bugzilla/pull/188
# Fix API Key leak
Patch1: 188-fix-api-key-leak.diff
BuildRequires: %{python_module pytest}
BuildRequires: %{python_module requests}
BuildRequires: %{python_module setuptools}