Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package phodav for openSUSE:Factory checked in at 2026-10-30 18:09:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/phodav (Old) and /work/SRC/openSUSE:Factory/.phodav.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "phodav" Fri Oct 30 18:09:42 2026 rev:9 rq:1393624 version:3.2 Changes: -------- --- /work/SRC/openSUSE:Factory/phodav/phodav.changes 2024-10-16 23:38:45.088959230 +0200 +++ /work/SRC/openSUSE:Factory/.phodav.new.1255/phodav.changes 2026-10-30 18:13:51.248170106 +0100 @@ -1,0 +2,39 @@ +Wed Oct 28 12:43:19 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 3.2: + * Spice-webdavd: close the local client connection when the host drops it, + instead of leaving the webdav client waiting for the end of the response or + reusing a dropped connection, which led to dropped frames and hangs + * Spice-webdavd: announce the local mDNS service on loopback only, and run as + an unprivileged user in the systemd unit + * Libphodav: add debug tracing for the request lifecycle, the streamed + response pulls and the spice mux frames, silent unless G_MESSAGES_DEBUG is + set + * Windows testing fixes: read the virtual-dir server port from a file to + avoid the carriage return of the text-mode standard handles, and run the + Wine tests with their output to regular files, which a stray "explorer.exe + /desktop" process cannot keep open + * Updated translations. +- Changes from version 3.1: + * CVE-2026-114417: reject the encoded slashes in the COPY/MOVE + Destination header, which allowed writing outside of the shared directory + * CVE-2026-114418: don't handle PUT when the request was already rejected: + with digest authentication configured, an unauthenticated client could + create or overwrite any file of the share + * CVE-2026-114419: chezdav: check the digest password, any password was + accepted for a user listed in the htdigest file + * refuse the oversized request bodies with 413, including the chunked ones, + and don't run the method handler of an already rejected request + * fix crash and hangs on invalid If headers + * fix a crash on PROPFIND/PROPPATCH requests without any property +- Update version dependencies according to meson.build. +- Drop harden_spice-webdavd.service.patch: fixed upstream. +- Convert to _service for easier management. +- Replace gtk-doc BuildRequires for scdoc and pkgconfig(gi-docgen): follow + upstreams port away from gtk-doc +- Add pkgconfig(neon), pkgconfig(gobject-introspection-1.0): new dependencies +- Split out lang files from the shared library package: fixing policy violation +- Provide phodav-3.0 by the libphodav-3_0-0 to have the new lang package + installable + +------------------------------------------------------------------- Old: ---- harden_spice-webdavd.service.patch phodav-3.0.tar.xz New: ---- _scmsync.obsinfo _service build.specials.obscpio phodav-3.2.tar.xz phodav.obsinfo ----------(Old B)---------- Old:- Update version dependencies according to meson.build. - Drop harden_spice-webdavd.service.patch: fixed upstream. - Convert to _service for easier management. ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ phodav.spec ++++++ --- /var/tmp/diff_new_pack.cceqI7/_old 2026-10-30 18:13:56.932408061 +0100 +++ /var/tmp/diff_new_pack.cceqI7/_new 2026-10-30 18:13:56.937408270 +0100 @@ -18,28 +18,28 @@ %define shlib libphodav-3_0-0 Name: phodav -Version: 3.0 +Version: 3.2 Release: 0 Summary: A WebDAV server using libsoup License: LGPL-2.0-or-later Group: Productivity/Networking/File-Sharing URL: https://wiki.gnome.org/phodav -Source0: https://download.gnome.org/sources/%{name}/%{version}/%{name}-%{version}.tar.xz -# PATCH-FEATURE-OPENSUSE -Patch0: harden_spice-webdavd.service.patch - +Source0: %{name}-%{version}.tar.xz BuildRequires: asciidoc -BuildRequires: gtk-doc BuildRequires: meson >= 0.50 BuildRequires: pkgconfig +BuildRequires: scdoc BuildRequires: systemd-rpm-macros BuildRequires: xmlto BuildRequires: pkgconfig(avahi-client) BuildRequires: pkgconfig(avahi-gobject) -BuildRequires: pkgconfig(gio-unix-2.0) >= 2.44 +BuildRequires: pkgconfig(gi-docgen) +BuildRequires: pkgconfig(gio-unix-2.0) >= 2.80 BuildRequires: pkgconfig(glib-2.0) >= 2.44 -BuildRequires: pkgconfig(libsoup-3.0) +BuildRequires: pkgconfig(gobject-introspection-1.0) +BuildRequires: pkgconfig(libsoup-3.0) >= 3.2.0 BuildRequires: pkgconfig(libxml-2.0) +BuildRequires: pkgconfig(neon) BuildRequires: pkgconfig(systemd) BuildRequires: pkgconfig(udev) %{?systemd_ordering} @@ -50,16 +50,28 @@ %package -n %{shlib} Summary: A library for file sharing with WebDAV Group: System/Libraries +# Provides for the translations (-lang package) +Provides: phodav-3.0 = %{version} %description -n %{shlib} phodav is a WebDav server implementation using libsoup (RFC 4918). This package provides the shared library for %{name}. +%package -n typelib-1_0-Phodav-3_0 +Summary: A library for file sharing with WebDAV +Group: System/Libraries + +%description -n typelib-1_0-Phodav-3_0 +phodav is a WebDav server implementation using libsoup (RFC 4918). + +This package provides the shared library for %{name}. + %package devel Summary: Development files for %{name} Group: Development/Libraries/C and C++ Requires: %{shlib} = %{version} +Requires: typelib-1_0-Phodav-3_0 = %{version} %description devel phodav is a WebDav server implementation using libsoup (RFC 4918). @@ -83,22 +95,24 @@ The spice-webdavd package contains a daemon to proxy WebDAV request to the Spice virtio channel. +%lang_package -n phodav-3.0 + %prep %autosetup -p1 +echo "%{version}" > .tarball-version %build %meson \ + -Dlitmus=disabled \ %{nil} %meson_build %install %meson_install - %find_lang phodav-3.0 --with-gnome %post -n %{shlib} -p /sbin/ldconfig %postun -n %{shlib} -p /sbin/ldconfig - %pre -n spice-webdavd %service_add_pre spice-webdavd.service @@ -111,16 +125,22 @@ %postun -n spice-webdavd %service_del_postun spice-webdavd.service -%files -n %{shlib} -f %{name}-3.0.lang +%files -n phodav-3.0-lang -f phodav-3.0.lang + +%files -n %{shlib} %{_libdir}/libphodav-3.0.so.0* +%files -n typelib-1_0-Phodav-3_0 +%{_libdir}/girepository-1.0/Phodav-3.0.typelib + %files devel %license COPYING %dir %{_includedir}/libphodav-3.0/ %{_includedir}/libphodav-3.0/* %{_libdir}/libphodav-3.0.so %{_libdir}/pkgconfig/libphodav-3.0.pc -%{_datadir}/gtk-doc/html/phodav-3.0/ +%{_datadir}/doc/phodav-3.0/ +%{_datadir}/gir-1.0/Phodav-3.0.gir %files -n chezdav %{_bindir}/chezdav @@ -131,4 +151,5 @@ %{_sbindir}/spice-webdavd %{_udevrulesdir}/70-spice-webdavd.rules %{_unitdir}/spice-webdavd.service +%{_sysusersdir}/spice-webdavd.conf ++++++ _scmsync.obsinfo ++++++ mtime: 1793268515 commit: b1555b9787f20b1a908aeba05fc03eeefeae85b4f475823c5e9b0a63ab35baed url: https://src.opensuse.org/GNOME/phodav revision: b1555b9787f20b1a908aeba05fc03eeefeae85b4f475823c5e9b0a63ab35baed trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ _service ++++++ <?xml version="1.0"?> <services> <service name="obs_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://gitlab.gnome.org/GNOME/phodav.git</param> <param name="revision">v3.2</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">v?(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> <param name="changesgenerate">disable</param> </service> <service name="tar" mode="manual"/> <service name="recompress" mode="manual"> <param name="file">*.tar</param> <param name="compression">xz</param> </service> <service name="set_version" mode="manual"> <param name="basename">phodav</param> </service> </services> ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-29 11:08:35.000000000 +0100 @@ -0,0 +1,5 @@ +*.obscpio +*.osc +_build.* +.pbuild +osc-collab.* ++++++ phodav-3.0.tar.xz -> phodav-3.2.tar.xz ++++++ ++++ 32785 lines of diff (skipped) ++++++ phodav.obsinfo ++++++ name: phodav version: 3.2 mtime: 1793186967 commit: 89ae4a63095200f1970f76b6ae2d25d839f8d676
