Overview
Request 1185748 accepted
- Update to version 3.7
https://github.com/SELinuxProject/selinux/releases/tag/3.7
* User-visible changes:
* libsepol: improve policy lookup failure message
* libsepol: include prefix for module policy versions
* libsepol: validate type-attribute-map for old policies
* libsepol: only exempt gaps checking for kernel policies
* Bugfixes:
* libsepol/src/Makefile: fix reallocarray detection
* libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
* libsepol: ensure transitivity in compare functions
* oss-fuzz fixes:
* libsepol: check scope permissions refer to valid class
* libsepol: validate attribute-type maps
* libsepol: reject self flag in type rules in old policies
* libsepol: validate class permissions
* libsepol: validate access vector permissions
* libsepol: reject MLS support in pre-MLS policies
* libsepol: Fix buffer overflow when using sepol_av_to_string()
* libsepol: Use a dynamic buffer in sepol_av_to_string()
Request History
cahu created request
- Update to version 3.7
https://github.com/SELinuxProject/selinux/releases/tag/3.7
* User-visible changes:
* libsepol: improve policy lookup failure message
* libsepol: include prefix for module policy versions
* libsepol: validate type-attribute-map for old policies
* libsepol: only exempt gaps checking for kernel policies
* Bugfixes:
* libsepol/src/Makefile: fix reallocarray detection
* libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
* libsepol: ensure transitivity in compare functions
* oss-fuzz fixes:
* libsepol: check scope permissions refer to valid class
* libsepol: validate attribute-type maps
* libsepol: reject self flag in type rules in old policies
* libsepol: validate class permissions
* libsepol: validate access vector permissions
* libsepol: reject MLS support in pre-MLS policies
* libsepol: Fix buffer overflow when using sepol_av_to_string()
* libsepol: Use a dynamic buffer in sepol_av_to_string()
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto accepted review
Check script succeeded
anag+factory set openSUSE:Factory:Staging:N as a staging project
Being evaluated by staging project "openSUSE:Factory:Staging:N"
anag+factory accepted review
Picked "openSUSE:Factory:Staging:N"
licensedigger accepted review
The legal review is accepted preliminary. The package may require actions later on.
darix accepted review
Accepted review for by_group opensuse-review-team request 1185748 from user anag+factory
anag+factory accepted review
Staging Project openSUSE:Factory:Staging:N got accepted.
anag+factory approved review
Staging Project openSUSE:Factory:Staging:N got accepted.
anag+factory accepted request
Staging Project openSUSE:Factory:Staging:N got accepted.
Attention! these need to be accepted together: checkpolicy: https://build.opensuse.org/request/show/1185744
cil: https://build.opensuse.org/request/show/1185745
libselinux: https://build.opensuse.org/request/show/1185746
libsemanage: https://build.opensuse.org/request/show/1185747
libsepol: https://build.opensuse.org/request/show/1185748
mcstrans: https://build.opensuse.org/request/show/1185749
policycoreutils: https://build.opensuse.org/request/show/1185750
restorecond: https://build.opensuse.org/request/show/1185751
Hi @cahu
After having all the packages build together, something seems to break librepo's tests repeteadly , see:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:N/librepo/standard/x86_64
cc: @cvoegl @dmach @Pharaoh_Atem