Overview

Request 830088 accepted

- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
* 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch


Leap Reviewbot's avatar

home:Vogtinator:boo1175857/ark.openSUSE_Backports_SLE-15-SP1_Update@becc8c0435cf546fc463624fcc9ece9e -> openSUSE:Backports:SLE-15-SP1:Update/ark

expected origin is 'openSUSE:Leap:15.1' (changed)

home:Vogtinator:boo1175857/ark.openSUSE_Backports_SLE-15-SP2_Update@867ed4e96c6cc5129de61539ab98d312 -> openSUSE:Backports:SLE-15-SP2:Update/ark

expected origin is 'openSUSE:Leap:15.2' (changed)

home:Vogtinator:boo1175857/ark.openSUSE_Leap_15.1_Update@929498be3ad7cbcbdf794fbc487f791b -> openSUSE:Leap:15.1:Update/ark

expected origin is 'openSUSE:Factory' (changed)

sr#830103 to openSUSE:Factory has different sources

home:Vogtinator:boo1175857/ark.openSUSE_Leap_15.2_Update@8c50cfc0ce13babe32ced3e3059923a3 -> openSUSE:Leap:15.2:Update/ark

expected origin is 'None' (unchanged)

Request History
Fabian Vogt's avatar

Vogtinator created request

- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
* 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch


Factory Auto's avatar

factory-auto accepted review

openSUSE:Backports:SLE-15-SP1:Update/ark.openSUSE_Backports_SLE-15-SP1_Update::maintenance_incident: Check
script succeeded
openSUSE:Backports:SLE-15-SP2:Update/ark.openSUSE_Backports_SLE-15-SP2_Update::maintenance_incident: Check
script succeeded
openSUSE:Leap:15.1:Update/ark.openSUSE_Leap_15.1_Update::maintenance_incident: Check
script succeeded
openSUSE:Leap:15.2:Update/ark.openSUSE_Leap_15.2_Update::maintenance_incident: Check
script succeeded


Maintenance Bot's avatar

maintbot added factory-source as a reviewer

openSUSE:Leap:15.2:Update/ark.openSUSE_Leap_15.2_Update::maintenance_incident: null


Maintenance Bot's avatar

maintbot added KDE:Applications as a reviewer

openSUSE:Leap:15.2:Update/ark.openSUSE_Leap_15.2_Update::maintenance_incident: Submission
for None by someone who is not maintainer in the devel project (KDE:Applications).
Please review


Maintenance Bot's avatar

maintbot accepted review

openSUSE:Backports:SLE-15-SP1:Update/ark.openSUSE_Backports_SLE-15-SP1_Update::maintenance_incident: ok
openSUSE:Backports:SLE-15-SP2:Update/ark.openSUSE_Backports_SLE-15-SP2_Update::maintenance_incident: ok
openSUSE:Leap:15.1:Update/ark.openSUSE_Leap_15.1_Update::maintenance_incident: ok
openSUSE:Leap:15.2:Update/ark.openSUSE_Leap_15.2_Update::maintenance_incident: ok


Saul Goodman's avatar

licensedigger accepted review

ok


Source in Factory Checker's avatar

factory-source added backports-reviewers as a reviewer

openSUSE:Leap:15.2:Update/ark.openSUSE_Leap_15.2_Update::maintenance_incident: Automated
review failed. Needs fallback reviewer.


Source in Factory Checker's avatar

factory-source accepted review

openSUSE:Backports:SLE-15-SP1:Update/ark.openSUSE_Backports_SLE-15-SP1_Update::maintenance_incident: the
package needs to be accepted in openSUSE:Factory or openSUSE:Factory or openSUSE:Factory
or openSUSE:Factory first
openSUSE:Backports:SLE-15-SP2:Update/ark.openSUSE_Backports_SLE-15-SP2_Update::maintenance_incident: the
package needs to be accepted in openSUSE:Factory or openSUSE:Factory or openSUSE:Factory
or openSUSE:Factory first
openSUSE:Leap:15.1:Update/ark.openSUSE_Leap_15.1_Update::maintenance_incident: the
package needs to be accepted in openSUSE:Factory or openSUSE:Factory or openSUSE:Factory
or openSUSE:Factory first
openSUSE:Leap:15.2:Update/ark.openSUSE_Leap_15.2_Update::maintenance_incident: the
package needs to be accepted in openSUSE:Factory or openSUSE:Factory or openSUSE:Factory
or openSUSE:Factory first


Ismail Dönmez's avatar

namtrac accepted review


Christophe Giboudeaux's avatar

cgiboudeaux accepted review

ok


Christophe Giboudeaux's avatar

cgiboudeaux approved review

ok


Alexandros Toptsoglou's avatar

atopt moved maintenance target to openSUSE:Maintenance:13811


Alexandros Toptsoglou's avatar

atopt accepted request

accepted request 830088:Thanks!

For information about the update, see https://build.opensuse.org/project/maintenance_incidents/openSUSE:Maintenance

openSUSE Build Service is sponsored by