Overview

Request 1109413 accepted

- Add CVE-2023-41040.patch to fix directory traversal attack
vulnerability gh#gitpython-developers/GitPython#1644
bsc#1214810

- Update _service to use manualrun, disabledrun is deprecated now.
- Update to version 3.1.34.1693646983.2a2ae77:
* prepare patch release
* util: close lockfile after opening successfully
* update instructions for how to create a release
* prepare for next release
* Skip now permanently failing test with note on how to fix it
* Don't check form of version number
* Add a unit test for CVE-2023-40590
* Fix CVE-2023-40590
* feat: full typing for "progress" parameter
* Creating a lock now uses python built-in "open()" method to work around docker virtiofs issue
* Disable merge_includes in config writers
* Apply straight-forward typing fixes
* Add missing type annotation
* Run black and exclude submodule
* Allow explicit casting even when slightly redundant
* Ignore remaining [unreachable] type errors
* Define supported version for mypy
* Do not typecheck submodule
* typo
* added more resources section
* generic hash
* redundant code cell
* redundant line
* fixed tabbing

Request History
Daniel Garcia's avatar

dgarcia created request

- Add CVE-2023-41040.patch to fix directory traversal attack
vulnerability gh#gitpython-developers/GitPython#1644
bsc#1214810

- Update _service to use manualrun, disabledrun is deprecated now.
- Update to version 3.1.34.1693646983.2a2ae77:
* prepare patch release
* util: close lockfile after opening successfully
* update instructions for how to create a release
* prepare for next release
* Skip now permanently failing test with note on how to fix it
* Don't check form of version number
* Add a unit test for CVE-2023-40590
* Fix CVE-2023-40590
* feat: full typing for "progress" parameter
* Creating a lock now uses python built-in "open()" method to work around docker virtiofs issue
* Disable merge_includes in config writers
* Apply straight-forward typing fixes
* Add missing type annotation
* Run black and exclude submodule
* Allow explicit casting even when slightly redundant
* Ignore remaining [unreachable] type errors
* Define supported version for mypy
* Do not typecheck submodule
* typo
* added more resources section
* generic hash
* redundant code cell
* redundant line
* fixed tabbing


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Ana Guerrero's avatar

anag+factory set openSUSE:Factory:Staging:E as a staging project

Being evaluated by staging project "openSUSE:Factory:Staging:E"


Ana Guerrero's avatar

anag+factory accepted review

Picked "openSUSE:Factory:Staging:E"


Saul Goodman's avatar

licensedigger accepted review

ok


Dominique Leuenberger's avatar

dimstar accepted review

ok


Ana Guerrero's avatar

anag+factory accepted review

Staging Project openSUSE:Factory:Staging:E got accepted.


Ana Guerrero's avatar

anag+factory approved review

Staging Project openSUSE:Factory:Staging:E got accepted.


Ana Guerrero's avatar

anag+factory accepted request

Staging Project openSUSE:Factory:Staging:E got accepted.

openSUSE Build Service is sponsored by