Hello community, here is the log from the commit of package git-annex for openSUSE:Factory checked in at 2017-08-22 11:09:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/git-annex (Old) and /work/SRC/openSUSE:Factory/.git-annex.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "git-annex" Tue Aug 22 11:09:58 2017 rev:11 rq:517919 version:6.20170818 Changes: -------- --- /work/SRC/openSUSE:Factory/git-annex/git-annex.changes 2017-07-06 00:00:42.249081686 +0200 +++ /work/SRC/openSUSE:Factory/.git-annex.new/git-annex.changes 2017-08-22 11:10:01.449033396 +0200 @@ -1,0 +2,50 @@ +Mon Aug 21 10:51:36 UTC 2017 - psim...@suse.com + +- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976). + * Security fix: Disallow hostname starting with a dash, which + would get passed to ssh and be treated an option. This could + be used by an attacker who provides a crafted repository url + to cause the victim to execute arbitrary code via -oProxyCommand. + (The same class of security hole recently affected git itself.) + * git-annex.cabal: Deal with breaking changes in Cabal 2.0. + * Fix build with QuickCheck 2.10. + * fsck: Support --json. + * move, copy: Support --batch. + * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to + override the default timestamps used in log files in the git-annex + branch. This is a dangerous environment variable; use with caution. + * Fix a git-annex test failure when run on NFS due to NFS lock files + preventing directory removal. + * test: Avoid most situations involving failure to delete test + directories, by forking a worker process and only deleting the test + directory once it exits. + * Disable http-client's default 30 second response timeout when HEADing + an url to check if it exists. Some web servers take quite a long time + to answer a HEAD request. + * Added remote configuration settings annex-ignore-command and + annex-sync-command, which are dynamic equivilants of the annex-ignore + and annex-sync configurations. + * Prevent spaces from being embedded in the name of new WORM keys, + as that handing spaces in keys would complicate things like the + external special remote protocol. + * migrate: WORM keys containing spaces will be migrated to not contain + spaces anymore. + * External special remotes will refuse to operate on keys with spaces in + their names. That has never worked correctly due to the design of the + external special remote protocol. Display an error message suggesting + migration. + * Fix incorrect external special remote documentation, which said that + the filename parameter to the TRANSFER command could not contain + spaces. It can in fact contain spaces. Special remotes implementors + that relied on that may need to fix bugs in their special remotes. + * Fix the external special remotes git-annex-remote-ipfs, + git-annex-remote-torrent and the example.sh template to correctly + support filenames with spaces. + * Windows: Win32 package has subsumed Win32-extras; update dependency. + +------------------------------------------------------------------- +Thu Aug 3 15:38:38 UTC 2017 - psim...@suse.com + +- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf. + +------------------------------------------------------------------- Old: ---- git-annex-6.20170520.tar.gz New: ---- git-annex-6.20170818.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ git-annex.spec ++++++ --- /var/tmp/diff_new_pack.M7Z2Yg/_old 2017-08-22 11:10:02.500885289 +0200 +++ /var/tmp/diff_new_pack.M7Z2Yg/_new 2017-08-22 11:10:02.504884726 +0200 @@ -17,12 +17,12 @@ Name: git-annex -Version: 6.20170520 +Version: 6.20170818 Release: 0 Summary: Manage files with git, without checking their contents into git License: GPL-3.0+ AND AGPL-3.0+ AND BSD-2-Clause AND MIT AND GPL-2.0 Group: Development/Tools/Version Control -Url: https://hackage.haskell.org/package/%{name} +URL: https://hackage.haskell.org/package/%{name} Source0: https://github.com/peti/git-annex/archive/%{version}.tar.gz#/%{name}-%{version}.tar.gz BuildRequires: bash-completion BuildRequires: curl @@ -129,7 +129,6 @@ Recommends: rsync Recommends: ssh Suggests: %{name}-bash-completion -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description Git-annex allows managing files with git, without checking the file contents @@ -183,7 +182,6 @@ %icon_theme_cache_postun %files -%defattr(-,root,root,-) %doc COPYRIGHT README %{_bindir}/%{name} %{_bindir}/%{name}-shell @@ -201,7 +199,6 @@ %{_datadir}/icons/hicolor/scalable/apps/git-annex.svg %files bash-completion -%defattr(-,root,root) %{_datadir}/bash-completion/completions/git-annex %changelog ++++++ git-annex-6.20170520.tar.gz -> git-annex-6.20170818.tar.gz ++++++ /work/SRC/openSUSE:Factory/git-annex/git-annex-6.20170520.tar.gz /work/SRC/openSUSE:Factory/.git-annex.new/git-annex-6.20170818.tar.gz differ: char 15, line 1
