Hello community, here is the log from the commit of package libzypp for openSUSE:Factory checked in at 2018-08-24 16:59:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libzypp (Old) and /work/SRC/openSUSE:Factory/.libzypp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libzypp" Fri Aug 24 16:59:03 2018 rev:402 rq:630829 version:17.6.2 Changes: -------- --- /work/SRC/openSUSE:Factory/libzypp/libzypp.changes 2018-08-02 14:50:27.859509418 +0200 +++ /work/SRC/openSUSE:Factory/.libzypp.new/libzypp.changes 2018-08-24 16:59:07.009716803 +0200 @@ -1,0 +2,31 @@ +Tue Aug 21 18:46:35 CEST 2018 - ma@suse.de + +- fixup! Add filesize check for downloads with known size (bsc#408814) + Fix detetction of metalink downloads and prevent aborting if + a metalink file is larger than the expected data file. +- version 17.6.2 (2) + +------------------------------------------------------------------- +Fri Aug 17 14:52:14 CEST 2018 - ma@suse.de + +- Adapt to changes in libgpgme11-11.1.0 breaking the signature + verification (bsc#1100427) +- Use %license (bsc#1082318) +- BuildRequires: libsolv-devel >= 0.6.35 (for bsc#1100095) +- changes: add CVE numbers +- version 17.6.1 (2) + +------------------------------------------------------------------- +Fri Aug 3 11:11:25 CEST 2018 - ma@suse.de + +- RepoInfo::provideKey: add report telling where we look for missing + keys. +- Support listing gpgkey URLs in repo files (bsc#1088037) +- Add new report to request user approval for importing a package key +- Handle http error 502 Bad Gateway in curl backend (bsc #1070851) + (fixes openSUSE/zypper#177) +- Add filesize check for downloads with known size (bsc#408814) +- Removed superfluous space in translation (bsc#1102019) +- version 17.6.0 (2) + +------------------------------------------------------------------- @@ -25 +56,2 @@ -- PackageProvider: Validate deta rpms before caching (bsc#1091624) +- PackageProvider: Validate deta rpms before caching (bsc#1091624, + bsc#1088705, CVE-2018-7685) @@ -27 +59 @@ - before caching (bsc#1091624) + before caching (bsc#1091624, bsc#1088705, CVE-2018-7685) Old: ---- libzypp-17.5.2.tar.bz2 New: ---- libzypp-17.6.2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libzypp.spec ++++++ --- /var/tmp/diff_new_pack.2bM8OQ/_old 2018-08-24 16:59:07.665717579 +0200 +++ /var/tmp/diff_new_pack.2bM8OQ/_new 2018-08-24 16:59:07.665717579 +0200 @@ -17,9 +17,9 @@ Name: libzypp -Version: 17.5.2 +Version: 17.6.2 Release: 0 -Url: git://gitorious.org/opensuse/libzypp.git +Url: https://github.com/openSUSE/libzypp Summary: Package, Patch, Pattern, and Product Management License: GPL-2.0-or-later Group: System/Packages @@ -75,7 +75,7 @@ BuildRequires: pkg-config %endif -BuildRequires: libsolv-devel >= 0.6.27 +BuildRequires: libsolv-devel >= 0.6.35 %if 0%{?suse_version} >= 1100 BuildRequires: libsolv-tools %requires_eq libsolv-tools @@ -330,6 +330,7 @@ %files -f zypp.lang %defattr(-,root,root) +%license COPYING %dir %{_sysconfdir}/zypp %if 0%{?fedora_version} || 0%{?rhel_version} >= 600 || 0%{?centos_version} >= 600 %{_sysconfdir}/zypp/repos.d ++++++ libzypp-17.5.2.tar.bz2 -> libzypp-17.6.2.tar.bz2 ++++++ ++++ 33603 lines of diff (skipped)