Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package NetworkManager-openvpn for 
openSUSE:Leap:16.0 checked in at 2025-04-16 16:17:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:16.0/NetworkManager-openvpn (Old)
 and      /work/SRC/openSUSE:Leap:16.0/.NetworkManager-openvpn.new.30101 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "NetworkManager-openvpn"

Wed Apr 16 16:17:07 2025 rev:2 rq:1269799 version:1.12.0

Changes:
--------
--- 
/work/SRC/openSUSE:Leap:16.0/NetworkManager-openvpn/NetworkManager-openvpn.changes
  2025-03-19 11:38:06.183984200 +0100
+++ 
/work/SRC/openSUSE:Leap:16.0/.NetworkManager-openvpn.new.30101/NetworkManager-openvpn.changes
       2025-04-20 20:13:23.434748230 +0200
@@ -1,0 +2,15 @@
+Tue Mar  4 06:10:20 UTC 2025 - Jonathan Kang <songchuan.k...@suse.com>
+
+- Add nm-openvpn-fix-crash.patch: service: fix a crash when empty
+  password is provided (glgo#GNOME/NetworkManager-openvpn!92,
+  bsc#1237570).
+
+-------------------------------------------------------------------
+Mon Jun 24 09:01:48 UTC 2024 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Update to version 1.12.0:
+  + Adapt to the new way of handling the 2FA secret by the daemon,
+    needed by it to fix a bug with certain clients.
+  + Updated translations.
+
+-------------------------------------------------------------------

Old:
----
  NetworkManager-openvpn-1.10.2.tar.xz

New:
----
  NetworkManager-openvpn-1.12.0.tar.xz
  nm-openvpn-fix-crash.patch

BETA DEBUG BEGIN:
  New:
- Add nm-openvpn-fix-crash.patch: service: fix a crash when empty
  password is provided (glgo#GNOME/NetworkManager-openvpn!92,
BETA DEBUG END:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ NetworkManager-openvpn.spec ++++++
--- /var/tmp/diff_new_pack.nF0xbC/_old  2025-04-20 20:13:23.750761459 +0200
+++ /var/tmp/diff_new_pack.nF0xbC/_new  2025-04-20 20:13:23.754761627 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package NetworkManager-openvpn
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,16 +17,18 @@
 
 
 Name:           NetworkManager-openvpn
-Version:        1.10.2
+Version:        1.12.0
 Release:        0
 Summary:        NetworkManager VPN support for OpenVPN
 License:        GPL-2.0-or-later
 Group:          Productivity/Networking/System
 URL:            https://www.gnome.org/projects/NetworkManager
-Source0:        
https://download.gnome.org/sources/NetworkManager-openvpn/1.10/%{name}-%{version}.tar.xz
+Source0:        
https://download.gnome.org/sources/NetworkManager-openvpn/1.12/%{name}-%{version}.tar.xz
 Source1:        system-user-nm-openvpn.conf
 # PATCH-FIX-OPENSUSE fix-for-missing-whirlpool-hmac-authentication.patch 
boo#1132946
 Patch0:         fix-for-missing-whirlpool-hmac-authentication.patch
+# PATCH-FIX-UPSTREAM nm-openvpn-fix-crash.patch 
glgo#GNOME/NetworkManager-openvpn!92, bsc#1237570 sck...@suse.com -- service: 
fix a crash when empty password is provided
+Patch1:         nm-openvpn-fix-crash.patch
 
 BuildRequires:  libxml2-tools
 BuildRequires:  pkgconfig
@@ -34,11 +36,11 @@
 BuildRequires:  pkgconfig(dbus-glib-1)
 BuildRequires:  pkgconfig(gtk+-3.0)
 BuildRequires:  pkgconfig(gtk4) >= 4.0
-BuildRequires:  pkgconfig(libnm) >= 1.2.0
-BuildRequires:  pkgconfig(libnma) >= 1.2.0
+BuildRequires:  pkgconfig(libnm) >= 1.46.2
+BuildRequires:  pkgconfig(libnma) >= 1.8.0
 BuildRequires:  pkgconfig(libnma-gtk4) >= 1.8.33
 BuildRequires:  pkgconfig(libsecret-1) >= 0.18
-Requires:       NetworkManager >= 1.2.0
+Requires:       NetworkManager >= 1.46.2
 Requires:       openvpn
 Supplements:    (NetworkManager and openvpn)
 %sysusers_requires

++++++ NetworkManager-openvpn-1.10.2.tar.xz -> 
NetworkManager-openvpn-1.12.0.tar.xz ++++++
++++ 39530 lines of diff (skipped)

++++++ nm-openvpn-fix-crash.patch ++++++
>From a65f66d2de6f259f08be30a3a9e03827674acdcf Mon Sep 17 00:00:00 2001
From: Jonathan Kang <jonathank...@gnome.org>
Date: Mon, 3 Mar 2025 13:52:27 +0800
Subject: [PATCH] service: fix a crash when empty password is provided

When activating a VPN connection with the following command, if no
password is provided, nm-openvpn-service crashes.

> nmcli --ask connection up $vpn-connection

Fix that by additionally checking for empty password to avoid passing
NULL to strlen().

https://bugzilla.suse.com/show_bug.cgi?id=1237570
---
 src/nm-openvpn-service.c | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/src/nm-openvpn-service.c b/src/nm-openvpn-service.c
index a58124d..b01671d 100644
--- a/src/nm-openvpn-service.c
+++ b/src/nm-openvpn-service.c
@@ -781,18 +781,25 @@ nm_openvpn_disconnect_management_socket (NMOpenvpnPlugin 
*plugin)
 static char *
 ovpn_quote_string (const char *unquoted)
 {
-       char *quoted = NULL, *q;
-       char *u = (char *) unquoted;
+       char *quoted = NULL;
 
        g_return_val_if_fail (unquoted != NULL, NULL);
 
-       /* FIXME: use unpaged memory */
-       quoted = q = g_malloc0 (strlen (unquoted) * 2);
-       while (*u) {
-               /* Escape certain characters */
-               if (*u == ' ' || *u == '\\' || *u == '"')
-                       *q++ = '\\';
-               *q++ = *u++;
+       /* Check empty password to avoid segmentation fault. */
+       if (g_strcmp0 (unquoted, "") == 0)
+               quoted = g_strdup (unquoted);
+       else {
+               char *q;
+               char *u = (char *) unquoted;
+
+               /* FIXME: use unpaged memory */
+               quoted = q = g_malloc0 (strlen (unquoted) * 2);
+               while (*u) {
+                       /* Escape certain characters */
+                       if (*u == ' ' || *u == '\\' || *u == '"')
+                               *q++ = '\\';
+                       *q++ = *u++;
+               }
        }
 
        return quoted;
-- 
2.48.1

Reply via email to