Accepting request 290485 from openSUSE:Tools

security update

OBS-URL: https://build.opensuse.org/request/show/290485
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/osc?expand=0&rev=103

PKGBUILD

@@ -1,5 +1,5 @@
 pkgname=osc
-pkgver=0.150.1
+pkgver=0.151.0
 pkgrel=0
 pkgdesc="Open Build Service client"
 arch=('i686' 'x86_64')
@@ -8,7 +8,7 @@ license=('GPL-2.0+' 'GPL-2.0')
 groups=('base-devel')
 depends=('python2' 'python2-m2crypto' 'urlgrabber')
 source=(osc-${pkgver}.tar.gz)
-md5sums=('24a5313d364d46a1a03c443c50bfbc2b')
+md5sums=('877b9e4fc2c55b8950d3e642241ff6aa')
 
 package() {
   msg "Installing osc ..."

_service

@@ -1,7 +1,7 @@
 <services>
   <service name="tar_scm" mode="disabled">
-    <param name="version">0.150.1</param>
-    <param name="revision">0.150</param>
+    <param name="version">0.151.0</param>
+    <param name="revision">0.151.0</param>
     <param name="url">git://github.com/openSUSE/osc.git</param>
     <param name="scm">git</param>
   </service>

debian.changelog

@@ -1,4 +1,4 @@
-osc (0.150.1) unstable; urgency=low
+osc (0.151.0) unstable; urgency=low
   - Update to 0.135.0
 
  -- Adrian Schroeter <adrian@suse.de>  Wed, 28 Jun 2012 10:00:00 +0200

osc-0.150.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a6ebb67cfe2b878f51dfa3a725cda176d28bef586bc23e4255d35fc830823386
-size 329415

osc-0.151.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0c941d956aca0cd342dd12d4885943f5383684ad4f0c8af6e14210672c4716c7
+size 330115

osc.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Thu Mar 12 09:36:27 UTC 2015 - adrian@suse.de
+
+- 0.151.0
+  - fixed shell command injection via crafted _service files CVE-2015-0778 boo#901643
+  - fix times when data comes from OBS backend
+  - support updateing the link in target package for submit requests
+  - various minor bugfixes
+
 -------------------------------------------------------------------
 Tue Jan 13 15:53:11 UTC 2015 - adrian@suse.de
 

osc.dsc

@@ -1,6 +1,6 @@
 Format: 1.0
 Source: osc
-Version: 0.150.1
+Version: 0.151.0
 Binary: osc
 Maintainer: Adrian Schroeter <adrian@suse.de>
 Architecture: any

osc.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package osc
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           osc
-Version:        0.150.1
+Version:        0.151.0
 Release:        0
 Summary:        openSUSE Build Service Commander
 License:        GPL-2.0+