Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package perl-Git-Repository for
openSUSE:Factory checked in at 2022-12-03 12:48:34
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Git-Repository (Old)
and /work/SRC/openSUSE:Factory/.perl-Git-Repository.new.1835 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Git-Repository"
Sat Dec 3 12:48:34 2022 rev:4 rq:1039783 version:1.325
Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-Git-Repository/perl-Git-Repository.changes
2021-06-02 22:12:38.484093579 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Git-Repository.new.1835/perl-Git-Repository.changes
2022-12-03 12:48:37.434150342 +0100
@@ -1,0 +2,6 @@
+Sat Dec 3 11:00:22 UTC 2022 - Stephan Kulow <[email protected]>
+
+- Add fix from https://github.com/book/Git-Repository/pull/22 to work
+ around git 2.38.1's new default behaviour (22.patch)
+
+-------------------------------------------------------------------
New:
----
22.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-Git-Repository.spec ++++++
--- /var/tmp/diff_new_pack.JKTV8B/_old 2022-12-03 12:48:38.962158877 +0100
+++ /var/tmp/diff_new_pack.JKTV8B/_new 2022-12-03 12:48:38.966158900 +0100
@@ -1,7 +1,7 @@
#
# spec file for package perl-Git-Repository
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -20,13 +20,15 @@
Name: perl-Git-Repository
Version: 1.325
Release: 0
-Summary: Perl interface to Git repositories
License: Artistic-1.0 OR GPL-1.0-or-later
+Summary: Perl interface to Git repositories
URL: https://metacpan.org/release/%{cpan_name}
Source0:
https://cpan.metacpan.org/authors/id/B/BO/BOOK/%{cpan_name}-%{version}.tar.gz
Source1: cpanspec.yml
+# PATCH-FIX-UPSTREAM https://github.com/book/Git-Repository/pull/22
+Patch0:
https://patch-diff.githubusercontent.com/raw/book/Git-Repository/pull/22.patch
# PATCH-FIX-UPSTREAM
https://rt.cpan.org/Public/Ticket/Attachment/1923740/1029935
-Patch0:
https://salsa.debian.org/perl-team/modules/packages/libgit-repository-perl/-/raw/c5e0eca06ca27fdaa547634b1e49f4637e7c1ca6/debian/patches/git-2.30.0.patch
+Patch1:
https://salsa.debian.org/perl-team/modules/packages/libgit-repository-perl/-/raw/c5e0eca06ca27fdaa547634b1e49f4637e7c1ca6/debian/patches/git-2.30.0.patch
BuildArch: noarch
BuildRequires: perl
BuildRequires: perl-macros
++++++ 22.patch ++++++
>From 4dc8dedb97891f37b9da2220e5740c65685b0906 Mon Sep 17 00:00:00 2001
From: Jan Pazdziora <[email protected]>
Date: Mon, 31 Oct 2022 17:26:00 +0100
Subject: [PATCH] Workaround change of behaviour in git 2.38.1 for
CVE-2022-39253.
By default, protocol.file.allow now defaults to user, preventing
clones with symlinks.
https://github.blog/2022-10-18-git-security-vulnerabilities-announced/#cve-2022-39253
---
t/21-submodule.t | 1 +
1 file changed, 1 insertion(+)
diff --git a/t/21-submodule.t b/t/21-submodule.t
index 444029c..97374f8 100644
--- a/t/21-submodule.t
+++ b/t/21-submodule.t
@@ -44,6 +44,7 @@ $s->run( checkout => 'master', { quiet => 1 } );
# now test adding a submodule
my $r = test_repository(@init);
$r->run(
+ ( Git::Repository->version_ge('2.38.1') ? ('-c',
'protocol.file.allow=always') : ()),
submodule => add => $s->work_tree => 'sub',
{ env => { GIT_WORK_TREE => undef } }
);
++++++ cpanspec.yml ++++++
--- /var/tmp/diff_new_pack.JKTV8B/_old 2022-12-03 12:48:39.018159190 +0100
+++ /var/tmp/diff_new_pack.JKTV8B/_new 2022-12-03 12:48:39.022159213 +0100
@@ -6,6 +6,7 @@
# - source2
patches:
https://salsa.debian.org/perl-team/modules/packages/libgit-repository-perl/-/raw/c5e0eca06ca27fdaa547634b1e49f4637e7c1ca6/debian/patches/git-2.30.0.patch:
-p1 PATCH-FIX-UPSTREAM
https://rt.cpan.org/Public/Ticket/Attachment/1923740/1029935
+
https://patch-diff.githubusercontent.com/raw/book/Git-Repository/pull/22.patch:
-p1 PATCH-FIX-UPSTREAM https://github.com/book/Git-Repository/pull/22
preamble: |-
BuildRequires: git-core
#post_prep: |-
