Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libdnf for openSUSE:Factory checked in at 2021-04-22 18:03:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libdnf (Old) and /work/SRC/openSUSE:Factory/.libdnf.new.12324 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libdnf" Thu Apr 22 18:03:23 2021 rev:25 rq:885735 version:0.62.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libdnf/libdnf.changes 2021-03-05 13:44:18.335569250 +0100 +++ /work/SRC/openSUSE:Factory/.libdnf.new.12324/libdnf.changes 2021-04-22 18:03:29.322462446 +0200 @@ -1,0 +2,30 @@ +Thu Apr 15 15:58:16 UTC 2021 - Neal Gompa <ngomp...@gmail.com> + +- Add patch to fix crash when loading DVD repositories + + Patch: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch + +------------------------------------------------------------------- +Tue Apr 13 13:06:00 UTC 2021 - Neal Gompa <ngomp...@gmail.com> + +- Update to 0.62.0 + + Change order of TransactionItemReason (rh#1921063) + + Add two new comperators for security filters (rh#1918475) + + Apply security filters for candidates with lower priority + + Fix: Goal - translation of messages in global maps + + Enhance description of modular solvables + + Improve performance for module query + + Change mechanism of modular errata applicability (rh#1804234) + + dnf_transaction_commit(): Remove second call to rpmtsSetVSFlags + + Fix a couple of memory leaks + + Fix: Setting of librepo handle in newHandle function + + Remove failsafe data when module is not enabled (rh#1847035) + + Expose librepo's checksum functions via SWIG + + Fix: Mising check of "hy_split_nevra()" return code + + Do not allow 1 as installonly_limit value (rh#1926261) + + Fix check whether the subkey can be used for signing + + Hardening: add signature check with rpmcliVerifySignatures + (CVE-2021-3445, CVE-2021-3421, CVE-2021-20271, rh#1932079, rh#1932089, rh#1932090, boo#1183779) + + Add a config option sslverifystatus, defaults to false (rh#1814383) + + [context] Add API for distro-sync + +------------------------------------------------------------------- Old: ---- libdnf-0.60.0.tar.gz New: ---- 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch libdnf-0.62.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libdnf.spec ++++++ --- /var/tmp/diff_new_pack.OhDfl1/_old 2021-04-22 18:03:29.878463305 +0200 +++ /var/tmp/diff_new_pack.OhDfl1/_new 2021-04-22 18:03:29.882463312 +0200 @@ -34,7 +34,7 @@ %define devname %{name}-devel Name: libdnf -Version: 0.60.0 +Version: 0.62.0 Release: 0 Summary: Library providing C and Python APIs atop libsolv License: LGPL-2.1-or-later @@ -43,6 +43,8 @@ Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz # Backports from upstream +## Fix crash when attempting to load DVD repositories +Patch0001: 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch # Fixes proposed upstream @@ -129,7 +131,6 @@ Summary: Documentation for the hawkey Python bindings Group: Documentation/Man BuildRequires: python3-Sphinx -BuildRequires: python3-nose BuildArch: noarch %description -n hawkey-man @@ -139,7 +140,6 @@ Summary: Python 3 bindings for the hawkey interface Group: Development/Libraries/Python BuildRequires: python3-devel -BuildRequires: python3-nose Requires: %{libname}%{?_isa} = %{version}-%{release} Requires: python3-%{name}%{?_isa} = %{version}-%{release} Recommends: hawkey-man = %{version}-%{release} ++++++ 0001-Fix-a-crash-when-repoId-not-found-in-loaded-conf-gke.patch ++++++ >From be66d0908d939ddaf3022c5489012bd1dbdb0075 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ale=C5=A1=20Mat=C4=9Bj?= <ama...@redhat.com> Date: Wed, 14 Apr 2021 09:11:29 +0200 Subject: [PATCH] Fix a crash when repoId not found in loaded conf gkeyFile (RhBug:1946024) The crash was caused by missing return value check. This can happen for example when using a bootable iso media which is missing the [media] section in .treeinfo. = changelog = msg: Fix a crash when [media] section in .treeinfo is missing for bootable media type: bugfix resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1946024 --- libdnf/dnf-repo.cpp | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/libdnf/dnf-repo.cpp b/libdnf/dnf-repo.cpp index 902eac92..710045fb 100644 --- a/libdnf/dnf-repo.cpp +++ b/libdnf/dnf-repo.cpp @@ -852,7 +852,13 @@ dnf_repo_conf_from_gkeyfile(libdnf::ConfigRepo &config, const char *repoId, GKey // Reset to the initial state before reloading the configuration. dnf_repo_conf_reset(config); - g_auto(GStrv) keys = g_key_file_get_keys(gkeyFile, repoId, NULL, NULL); + g_autoptr(GError) error_local = NULL; + g_auto(GStrv) keys = g_key_file_get_keys(gkeyFile, repoId, NULL, &error_local); + if (keys == NULL) { + g_debug("Failed to load configuration for repo id \"%s\": %s", repoId, error_local->message); + return; + } + for (auto it = keys; *it != NULL; ++it) { auto key = *it; g_autofree gchar *str = g_key_file_get_value(gkeyFile, repoId, key, NULL); -- 2.31.1 ++++++ libdnf-0.60.0.tar.gz -> libdnf-0.62.0.tar.gz ++++++ ++++ 1998 lines of diff (skipped)