Overview

Request 1161156 accepted

- update to 261 (bsc#1220157, CVE-2024-25711):
* Don't crash if we encounter an .rdb file without an
equivalent .rdx file.
* Actually test 7z support in the test_7z set of tests, not the
lz4 functionality.
* In addition, correctly check for the 7z binary being
available (and not lz4) when testing 7z.
* Prevent a traceback when comparing a contentful .pyc file
with an empty one. (Re: Debian:#1064973)
* Don't error-out with a traceback if we encounter
"struct.unpack"-related errors when parsing .pyc files.
* Fix compatibility with PyTest 8.0.
* Don't try and compare rdb_expected_diff on non-GNU systems as
%p formatting can vary.
* Use the 7zip package (over p7zip-full) after package
transition.
* Parse the header and hunksize of diffs strictly before
parsing the context below.
* Reformat code to comply with the latest version of Black
(24.1.1).
* Expand the previous changelog entry to include the CVE number
that was subsequently assigned.
* Bump the miniumum Black requirement to run the "Black clean"
test and make test_zip.py Black clean.
* CVE-2024-25711: Use a determistic name when extracting
content from GPG artifacts instead of trusting the value of
gpg's --use- embedded-filenames.
* Temporarily fix support for Python 3.11.8 re. a potential
regression with the handling of ZIP files.
* Add/fix compatibility for Python progressbar 2.5 & 3.0 etc.

Loading...
Request History
Dirk Mueller's avatar

dirkmueller created request

- update to 261 (bsc#1220157, CVE-2024-25711):
* Don't crash if we encounter an .rdb file without an
equivalent .rdx file.
* Actually test 7z support in the test_7z set of tests, not the
lz4 functionality.
* In addition, correctly check for the 7z binary being
available (and not lz4) when testing 7z.
* Prevent a traceback when comparing a contentful .pyc file
with an empty one. (Re: Debian:#1064973)
* Don't error-out with a traceback if we encounter
"struct.unpack"-related errors when parsing .pyc files.
* Fix compatibility with PyTest 8.0.
* Don't try and compare rdb_expected_diff on non-GNU systems as
%p formatting can vary.
* Use the 7zip package (over p7zip-full) after package
transition.
* Parse the header and hunksize of diffs strictly before
parsing the context below.
* Reformat code to comply with the latest version of Black
(24.1.1).
* Expand the previous changelog entry to include the CVE number
that was subsequently assigned.
* Bump the miniumum Black requirement to run the "Black clean"
test and make test_zip.py Black clean.
* CVE-2024-25711: Use a determistic name when extracting
content from GPG artifacts instead of trusting the value of
gpg's --use- embedded-filenames.
* Temporarily fix support for Python 3.11.8 re. a potential
regression with the handling of ZIP files.
* Add/fix compatibility for Python progressbar 2.5 & 3.0 etc.


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Staging Bot's avatar

staging-bot added as a reviewer

Being evaluated by staging project "openSUSE:Factory:Staging:adi:101"


Staging Bot's avatar

staging-bot accepted review

Picked "openSUSE:Factory:Staging:adi:101"


Saul Goodman's avatar

licensedigger accepted review

The legal review is accepted preliminary. The package may require actions later on.


Dominique Leuenberger's avatar

dimstar accepted review


Ana Guerrero's avatar

anag+factory accepted review

Staging Project openSUSE:Factory:Staging:adi:101 got accepted.


Ana Guerrero's avatar

anag+factory approved review

Staging Project openSUSE:Factory:Staging:adi:101 got accepted.


Ana Guerrero's avatar

anag+factory accepted request

Staging Project openSUSE:Factory:Staging:adi:101 got accepted.

openSUSE Build Service is sponsored by