Overview
Request 1161156 accepted
- update to 261 (bsc#1220157, CVE-2024-25711):
* Don't crash if we encounter an .rdb file without an
equivalent .rdx file.
* Actually test 7z support in the test_7z set of tests, not the
lz4 functionality.
* In addition, correctly check for the 7z binary being
available (and not lz4) when testing 7z.
* Prevent a traceback when comparing a contentful .pyc file
with an empty one. (Re: Debian:#1064973)
* Don't error-out with a traceback if we encounter
"struct.unpack"-related errors when parsing .pyc files.
* Fix compatibility with PyTest 8.0.
* Don't try and compare rdb_expected_diff on non-GNU systems as
%p formatting can vary.
* Use the 7zip package (over p7zip-full) after package
transition.
* Parse the header and hunksize of diffs strictly before
parsing the context below.
* Reformat code to comply with the latest version of Black
(24.1.1).
* Expand the previous changelog entry to include the CVE number
that was subsequently assigned.
* Bump the miniumum Black requirement to run the "Black clean"
test and make test_zip.py Black clean.
* CVE-2024-25711: Use a determistic name when extracting
content from GPG artifacts instead of trusting the value of
gpg's --use- embedded-filenames.
* Temporarily fix support for Python 3.11.8 re. a potential
regression with the handling of ZIP files.
* Add/fix compatibility for Python progressbar 2.5 & 3.0 etc.
- Created by dirkmueller
- In state accepted
Request History
dirkmueller created request
- update to 261 (bsc#1220157, CVE-2024-25711):
* Don't crash if we encounter an .rdb file without an
equivalent .rdx file.
* Actually test 7z support in the test_7z set of tests, not the
lz4 functionality.
* In addition, correctly check for the 7z binary being
available (and not lz4) when testing 7z.
* Prevent a traceback when comparing a contentful .pyc file
with an empty one. (Re: Debian:#1064973)
* Don't error-out with a traceback if we encounter
"struct.unpack"-related errors when parsing .pyc files.
* Fix compatibility with PyTest 8.0.
* Don't try and compare rdb_expected_diff on non-GNU systems as
%p formatting can vary.
* Use the 7zip package (over p7zip-full) after package
transition.
* Parse the header and hunksize of diffs strictly before
parsing the context below.
* Reformat code to comply with the latest version of Black
(24.1.1).
* Expand the previous changelog entry to include the CVE number
that was subsequently assigned.
* Bump the miniumum Black requirement to run the "Black clean"
test and make test_zip.py Black clean.
* CVE-2024-25711: Use a determistic name when extracting
content from GPG artifacts instead of trusting the value of
gpg's --use- embedded-filenames.
* Temporarily fix support for Python 3.11.8 re. a potential
regression with the handling of ZIP files.
* Add/fix compatibility for Python progressbar 2.5 & 3.0 etc.
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto accepted review
Check script succeeded
staging-bot added as a reviewer
Being evaluated by staging project "openSUSE:Factory:Staging:adi:101"
staging-bot accepted review
Picked "openSUSE:Factory:Staging:adi:101"
licensedigger accepted review
The legal review is accepted preliminary. The package may require actions later on.
dimstar accepted review
anag+factory accepted review
Staging Project openSUSE:Factory:Staging:adi:101 got accepted.
anag+factory approved review
Staging Project openSUSE:Factory:Staging:adi:101 got accepted.
anag+factory accepted request
Staging Project openSUSE:Factory:Staging:adi:101 got accepted.