Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-configobj for
openSUSE:Factory checked in at 2024-09-13 14:25:56
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-configobj (Old)
and /work/SRC/openSUSE:Factory/.python-configobj.new.29891 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-configobj"
Fri Sep 13 14:25:56 2024 rev:25 rq:1200122 version:5.0.8
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-configobj/python-configobj.changes
2024-01-05 22:59:44.642616430 +0100
+++
/work/SRC/openSUSE:Factory/.python-configobj.new.29891/python-configobj.changes
2024-09-13 14:26:23.127960301 +0200
@@ -1,0 +2,6 @@
+Wed Sep 11 12:08:59 UTC 2024 - Matej Cepl <mc...@cepl.eu>
+
+- Refresh CVE-2023-26112.patch according to the last state of
+ gh#DiffSK/configobj!236.
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ CVE-2023-26112.patch ++++++
--- /var/tmp/diff_new_pack.vEmmvY/_old 2024-09-13 14:26:23.739985832 +0200
+++ /var/tmp/diff_new_pack.vEmmvY/_new 2024-09-13 14:26:23.743985999 +0200
@@ -8,7 +8,7 @@
src/tests/test_validate_errors.py | 10 +++++++++-
2 files changed, 10 insertions(+), 2 deletions(-)
-diff --git a/validate.py b/validate.py
+diff --git a/src/configobj/validate.py b/src/configobj/validate.py
index 9267a3f..98d879f 100644
--- a/src/configobj/validate.py
+++ b/src/configobj/validate.py
@@ -21,5 +21,29 @@
# this regex takes apart keyword arguments
_key_arg = re.compile(r'^([a-zA-Z_][a-zA-Z0-9_]*)\s*=\s*(.*)$',
re.DOTALL)
-
+diff --git a/src/tests/test_validate_errors.py
b/src/tests/test_validate_errors.py
+index 399daa8..f7d6c27 100644
+--- a/src/tests/test_validate_errors.py
++++ b/src/tests/test_validate_errors.py
+@@ -3,7 +3,7 @@
+ import pytest
+
+ from configobj import ConfigObj, get_extra_values, ParseError, NestingError
+-from configobj.validate import Validator
++from configobj.validate import Validator, VdtUnknownCheckError
+
+ @pytest.fixture()
+ def thisdir():
+@@ -77,3 +77,11 @@ def test_no_parent(tmpdir, specpath):
+ ini.write('[[haha]]')
+ with pytest.raises(NestingError):
+ conf = ConfigObj(str(ini), configspec=specpath, file_error=True)
++
++
++def test_re_dos(val):
++ value = "aaa"
++ i = 165100
++ attack = '\x00'*i + ')' + '('*i
++ with pytest.raises(VdtUnknownCheckError):
++ val.check(attack, value)
