[openSUSE/osc] a887ad: Fix possibility to overwrite special files in .osc...
Branch: refs/heads/master Home: https://github.com/openSUSE/osc Commit: a887ade78fb6fcf615679555cc6196ba1ce8a6a4 https://github.com/openSUSE/osc/commit/a887ade78fb6fcf615679555cc6196ba1ce8a... Author: Daniel Mach <daniel.mach@suse.com> Date: 2024-07-29 (Mon, 29 Jul 2024) Changed paths: M osc/commandline.py M osc/core.py M osc/obs_scm/package.py M osc/obs_scm/store.py M tests/common.py M tests/test_addfiles.py M tests/test_commit.py M tests/test_deletefiles.py M tests/test_repairwc.py M tests/test_revertfiles.py M tests/test_update.py Log Message: ----------- Fix possibility to overwrite special files in .osc (CVE-2024-22034 boo#1225911) Source files are now stored in the 'sources' subdirectory which prevents name collisons. This requires changing version of '.osc' store to 2.0. Commit: 780d70d4b565cffcc65b535785d2e5009107b4af https://github.com/openSUSE/osc/commit/780d70d4b565cffcc65b535785d2e5009107b... Author: Daniel Mach <daniel.mach@suse.com> Date: 2024-07-29 (Mon, 29 Jul 2024) Changed paths: M NEWS M contrib/osc.spec M osc/__init__.py Log Message: ----------- release 1.9.0 Compare: https://github.com/openSUSE/osc/compare/d8bfd4521e72...780d70d4b565 To unsubscribe from these emails, change your notification settings at https://github.com/openSUSE/osc/settings/notifications
participants (1)
-
Daniel Mach