diff --git a/0003-Fix-input-termination-for-pgpParsePkts.patch b/0003-Fix-input-termination-for-pgpParsePkts.patch new file mode 100644 index 0000000..8db56f7 --- /dev/null +++ b/0003-Fix-input-termination-for-pgpParsePkts.patch @@ -0,0 +1,42 @@ +From 06f979fc87ca16046df0a9117ef1ca8c1751135c Mon Sep 17 00:00:00 2001 +From: Jaroslav Rohel +Date: Wed, 2 Oct 2024 10:00:34 +0200 +Subject: [PATCH] Fix input termination for pgpParsePkts + +The `pgpParsePkts` function needs the OpenPGP ASCII armored input to be +null terminated. The librepo contains code that checks if the input is +null-terminated. If it is not, the code creates a local null-terminated +copy of the input. + +There was a bug in the code, so it may look for a terminating null +several bytes behind the input buffer. And when a null was found behind +the input buffer, the termination was not done. This caused +the `pgpParsePkts` function to process several extra characters after +the input buffer. These characters are generally random and sometimes +cause the `pgpParsePkts` function to return an error. +--- + librepo/gpg_rpm.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/librepo/gpg_rpm.c b/librepo/gpg_rpm.c +index a1613ee8..692c64ec 100644 +--- a/librepo/gpg_rpm.c ++++ b/librepo/gpg_rpm.c +@@ -350,7 +350,7 @@ lr_gpg_import_key_from_memory(const char *key, size_t key_len, const char *home_ + + // `pgpParsePkts` needs null-terminated input, if null byte not found, make a local null-terminated copy + g_autofree gchar * key_with_null_byte = NULL; +- if (memchr(block_begin, '\0', key_len) == NULL) { ++ if (memchr(block_begin, '\0', key_len - (block_begin - key)) == NULL) { + key_with_null_byte = g_new(gchar, key_len + 1); + memcpy(key_with_null_byte, key, key_len); + key_with_null_byte[key_len] = '\0'; +@@ -533,7 +533,7 @@ check_signature(const gchar * sig_buf, ssize_t sig_buf_len, const gchar * data, + + // `pgpParsePkts` needs null-terminated input, if null byte not found, make a local null-terminated copy + g_autofree gchar * sig_buf_with_null_byte = NULL; +- if (memchr(block_begin, '\0', sig_buf_len) == NULL) { ++ if (memchr(block_begin, '\0', sig_buf_len - (block_begin - sig_buf)) == NULL) { + sig_buf_with_null_byte = g_new(gchar, sig_buf_len + 1); + memcpy(sig_buf_with_null_byte, sig_buf, sig_buf_len); + sig_buf_with_null_byte[sig_buf_len] = '\0'; diff --git a/0004-Test-importing-keys-with-prefix-and-suffix.patch b/0004-Test-importing-keys-with-prefix-and-suffix.patch new file mode 100644 index 0000000..9fc72ff --- /dev/null +++ b/0004-Test-importing-keys-with-prefix-and-suffix.patch @@ -0,0 +1,77 @@ +From 3db1cd8a7260f83170d247422976c8a8d4af09d9 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Ale=C5=A1=20Mat=C4=9Bj?= +Date: Mon, 30 Jun 2025 11:23:49 +0200 +Subject: [PATCH] Test importing keys with prefix and suffix + +Test the fix from: 1be89319d30d2ea2a027d6bd06bb1b76bd682f87 +--- + tests/test_gpg.c | 46 ++++++++++++++++++++++++++++++++++++++++++++++ + 1 file changed, 46 insertions(+) + +diff --git a/tests/test_gpg.c b/tests/test_gpg.c +index 6642cc7..b865991 100644 +--- a/tests/test_gpg.c ++++ b/tests/test_gpg.c +@@ -246,6 +246,51 @@ START_TEST(test_gpg_check_binary_key_import_test_export) + END_TEST + + ++START_TEST(test_gpg_check_import_padded) ++{ ++ // Verify that lr_gpg_import_key_from_memory properly respects the key_len ++ // argument and does not read any garbage beyond the key in memory. ++ ++ gboolean ret; ++ char *key_path; ++ char *tmp_home_path; ++ GError *tmp_err = NULL; ++ ++ tmp_home_path = lr_gettmpdir(); ++ key_path = lr_pathconcat(test_globals.testdata_dir, ++ "repo_yum_01/repodata/repomd.xml_bad.key.asc", NULL); ++ char *random_prefix_text = "The file with the key can have any text\n"; ++ int prefix_len = strlen(random_prefix_text); ++ // The suffix represents arbitrary memory that is located after the key ++ char suffix_with_garbage_and_null_byte[] = {'\xf4', '\xc2', '\x7f', '\0',}; ++ int suffix_len = sizeof(suffix_with_garbage_and_null_byte); ++ ++ // Load the key into memory ++ gchar *contents; ++ gsize length; ++ ret = g_file_get_contents(key_path, &contents, &length, &tmp_err); ++ ck_assert_ptr_null(tmp_err); ++ ck_assert(ret); ++ ++ // Wrap the loaded key with random text prefix and garbage suffix ++ gchar *padded_contents = g_malloc0(prefix_len + length + suffix_len); ++ memcpy(padded_contents, random_prefix_text, prefix_len); ++ memcpy(padded_contents + prefix_len, contents, length); ++ memcpy(padded_contents + prefix_len + length, suffix_with_garbage_and_null_byte, suffix_len); ++ ++ ret = lr_gpg_import_key_from_memory(padded_contents, prefix_len + length, tmp_home_path, &tmp_err); ++ ck_assert(ret); ++ ck_assert_ptr_null(tmp_err); ++ g_free(contents); ++ g_free(padded_contents); ++ ++ lr_remove_dir(tmp_home_path); ++ lr_free(key_path); ++ g_free(tmp_home_path); ++} ++END_TEST ++ ++ + Suite * + gpg_suite(void) + { +@@ -254,6 +299,7 @@ gpg_suite(void) + tcase_add_test(tc, test_gpg_check_signature); + tcase_add_test(tc, test_gpg_check_armored_key_import_test_export); + tcase_add_test(tc, test_gpg_check_binary_key_import_test_export); ++ tcase_add_test(tc, test_gpg_check_import_padded); + suite_add_tcase(s, tc); + return s; + } +-- +2.50.0 + diff --git a/librepo.spec b/librepo.spec deleted file mode 100644 index 9dda9af..0000000 --- a/librepo.spec +++ /dev/null @@ -1,474 +0,0 @@ -%global libcurl_version 7.52.0 - -%undefine __cmake_in_source_build - -%if 0%{?rhel} -%bcond_with zchunk -%else -%bcond_without zchunk -%endif - -%if 0%{?fedora} >= 39 || 0%{?rhel} >= 10 -%bcond_with use_gpgme -%bcond_with use_selinux -%else -%bcond_without use_gpgme -%bcond_without use_selinux -%endif - -# Needs to match how gnupg2 is compiled -%bcond_with run_gnupg_user_socket - -%if %{with use_gpgme} && %{with use_selinux} -%global need_selinux 1 -%else -%global need_selinux 0 -%endif - -%global dnf_conflict 2.8.8 - -Name: librepo -Version: 1.18.0 -Release: 3%{?dist} -Summary: Repodata downloading library - -License: LGPL-2.1-or-later -URL: https://github.com/rpm-software-management/librepo -Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz -Patch1: 0001-Use-rpm-sequoia-on-RHEL-10.patch -Patch2: 0002-Fix-a-memory-leak-in-select_next_target.patch - -BuildRequires: cmake -BuildRequires: gcc -BuildRequires: check-devel -BuildRequires: doxygen -BuildRequires: pkgconfig(glib-2.0) >= 2.66 -%if %{with use_gpgme} -BuildRequires: gpgme-devel -%else -BuildRequires: pkgconfig(rpm) >= 4.18.0 -%endif -BuildRequires: libattr-devel -BuildRequires: libcurl-devel >= %{libcurl_version} -BuildRequires: pkgconfig(libxml-2.0) -BuildRequires: pkgconfig(libcrypto) -%if %{need_selinux} -BuildRequires: pkgconfig(libselinux) -%endif -BuildRequires: pkgconfig(openssl) -%if %{with zchunk} -BuildRequires: pkgconfig(zck) >= 0.9.11 -%endif -Requires: libcurl%{?_isa} >= %{libcurl_version} - -%description -A library providing C and Python (libcURL like) API to downloading repository -metadata. - -%package devel -Summary: Repodata downloading library -Requires: %{name}%{?_isa} = %{version}-%{release} -%if %{with zchunk} -Requires: zchunk-devel%{?_isa} -%endif - -%description devel -Development files for librepo. - -%package -n python3-%{name} -Summary: Python 3 bindings for the librepo library -%{?python_provide:%python_provide python3-%{name}} -BuildRequires: python3-devel -BuildRequires: python3-gpg -BuildRequires: python3-pyxattr -BuildRequires: python3-requests -BuildRequires: python3-sphinx -Requires: %{name}%{?_isa} = %{version}-%{release} -# Obsoletes Fedora 27 package -Obsoletes: platform-python-%{name} < %{version}-%{release} -Conflicts: python3-dnf < %{dnf_conflict} - -%description -n python3-%{name} -Python 3 bindings for the librepo library. - -%prep -%autosetup -p1 - -%build -%cmake \ - -DWITH_ZCHUNK=%{?with_zchunk:ON}%{!?with_zchunk:OFF} \ - -DUSE_GPGME=%{?with_use_gpgme:ON}%{!?with_use_gpgme:OFF} \ - -DUSE_RUN_GNUPG_USER_SOCKET=%{?with_run_gnupg_user_socket:ON}%{!?with_run_gnupg_user_socket:OFF} \ - -DENABLE_SELINUX=%{?need_selinux:ON}%{!?need_selinux:OFF} -%cmake_build - -%check -%ctest - -%install -%cmake_install - -%if 0%{?rhel} && 0%{?rhel} <= 7 -%post -p /sbin/ldconfig -%postun -p /sbin/ldconfig -%else -%ldconfig_scriptlets -%endif - -%files -%license COPYING -%doc README.md -%{_libdir}/%{name}.so.* - -%files devel -%{_libdir}/%{name}.so -%{_libdir}/pkgconfig/%{name}.pc -%{_includedir}/%{name}/ - -%files -n python3-%{name} -%{python3_sitearch}/%{name}/ - -%changelog -* Tue Oct 29 2024 Troy Dawson - 1.18.0-3 -- Bump release for October 2024 mass rebuild: - Resolves: RHEL-64018 - -* Mon Jul 15 2024 Petr Pisar - 1.18.0-2 -- Use librpmio instead of gpgme for handling PGP keys (RHEL-47106) -- Fix a memory leak in select_next_target() (RHEL-35699) - -* Tue Jul 02 2024 Evan Goode - 1.18.0-1 -- Update to 1.18.0 (RHEL-35699) -- API: Add LRO_USERNAME and LRO_PASSWORD options -- Add a private dependency on zck to librepo.pc if zchunk support is enabled -- Hash cache: Improved work with extended file attributes -- Improve performance of large number of package downloads -- Fix error handling, Fix examples and build them - -* Mon Jun 24 2024 Troy Dawson - 1.17.1-2 -- Bump release for June 2024 mass rebuild - -* Tue Mar 26 2024 Jan Kolarik - 1.17.1-1 -- Update to 1.17.1 (RHEL-38831) -- gpg_gpgme.c: fix build errors with older gcc -- Change header files to match a configured ABI regarding a zchunk support -- Fix building zchunk code if zchunk is enabled -- Fix compiler warnings - -* Thu Jan 25 2024 Fedora Release Engineering - 1.17.0-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Sun Jan 21 2024 Fedora Release Engineering - 1.17.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - -* Wed Oct 18 2023 Jan Kolarik - 1.17.0-1 -- Update to 1.17.0 -- lr_gpg_check_signature: Forward PGP error messages from RPM -- PGP: fix: Support importing binary public keys in librpm backend -- PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user -- PGP: Set a default creation SELinux labels on GnuPG directories - -* Wed Sep 20 2023 Adam Williamson - 1.16.0-2 -- Rebuild with no changes for Bodhi reasons - -* Fri Sep 01 2023 Jan Kolarik - 1.16.0-1 -- Update to 1.16.0 -- Implement OpenPGP using librpm API - -* Tue Aug 01 2023 Jan Kolarik - 1.15.2-1 -- Update to 1.15.2 -- Fixes and optimizations in header files -- Fix lr_gpg_list_keys function when keys are empty -- Update PGP test vectors -- Fix CMake warnings -- Bump glib version - -* Thu Jul 20 2023 Fedora Release Engineering - 1.15.1-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - -* Wed Jun 14 2023 Python Maint - 1.15.1-3 -- Rebuilt for Python 3.12 - -* Thu Jan 19 2023 Fedora Release Engineering - 1.15.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - -* Fri Dec 09 2022 Jaroslav Rohel - 1.15.1-1 -- Update to 1.15.1 -- Adds API support for waiting on network in an event driven manner (new API function lr_handle_network_wait) -- OpenPGP API extension and fixes (new API functions lr_gpg_*) -- Update license format to "LGPL-2.1-or-later" - -* Tue Aug 23 2022 Jaroslav Rohel - 1.14.4-1 -- Update to 1.14.4 -- Use nanosec precision for timestamp of checksum cache (RhBug:2077864) -- Fix alloc/free mismatches and memory leaks - -* Thu Jul 21 2022 Fedora Release Engineering - 1.14.3-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - -* Wed Jun 15 2022 Python Maint - 1.14.3-2 -- Rebuilt for Python 3.11 - -* Thu May 05 2022 Jaroslav Rohel - 1.14.3-1 -- Update to 1.14.3 -- Make error messages about repodata and rpm mismatch more user friendly - -* Thu Jan 20 2022 Fedora Release Engineering - 1.14.2-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - -* Thu Sep 23 2021 Pavla Kratochvilova - 1.14.2-1 -- Update to 1.14.2 -- Fix covscan warnings and memory leak - -* Tue Sep 14 2021 Sahana Prasad - 1.14.1-3 -- Rebuilt with OpenSSL 3.0.0 - -* Thu Jul 22 2021 Fedora Release Engineering - 1.14.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - -* Tue Jun 15 2021 Pavla Kratochvilova - 1.14.1-1 -- Update to 1.14.1 -- Recover from fsync fail on read-only filesystem (RhBug:1956361) -- Reduce time to load metadata -- Fix resource leaks - -* Thu Jun 03 2021 Python Maint - 1.14.0-2 -- Rebuilt for Python 3.10 - -* Thu Apr 15 2021 Nicola Sella - 1.14.0-1 -- Update to 1.14.0 -- Fix: memory leaks -- Support multiple checksums in xattr (RhBz:1931904) -- Use macros to access extended attributes -- Remove problematic language -- CMake: Set minimum version for curl to 7.52.0 - -* Mon Mar 01 2021 Nicola Sella - 1.13.0-1 -- Update to 1.13.0 -- Add support for working with certificates used with proxy -- Drop Python 2 support -- Fix: lr_perform() - Avoid 100% CPU usage -- Add support for pkcs11 certificate and key for repository authorization -- Fix default value for LRO_SSLVERIFYSTATUS -- Don't use max_ranges to determine if we expect zchunk callback -- Prefer HTTP over FTP mirrors when zchunk is enabled -- Fixed mem leaks and typos - -* Tue Jan 26 2021 Fedora Release Engineering - 1.12.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -* Wed Oct 07 2020 Nicola Sella - 1.12.1-1 -* Update to 1.12.1 -- Validate path read from repomd.xml (RhBug:1868639) - -* Fri Aug 07 2020 Nicola Sella - 1.12.0-4 -spec: Fix building with new cmake macros - -* Sat Aug 01 2020 Fedora Release Engineering - 1.12.0-3 -- Second attempt - Rebuilt for - https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Tue Jul 28 2020 Fedora Release Engineering - 1.12.0-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Tue Jun 02 2020 Nicola Sella - 1.12.0-1 -- Update to 1.12.0 -- Decode package URL when using for local filename (RhBug:1817130) -- Fix memory leak in lr_download_metadata() and lr_yum_download_remote() -- Download sources work when at least one of specified is working (RhBug:1775184) -- Enable building on OSX - -* Mon May 25 2020 Miro Hrončok - 1.11.3-3 -- Rebuilt for Python 3.9 - -* Fri May 22 2020 Miro Hrončok - 1.11.3-2 -- Bootstrap for Python 3.9 - -* Wed Apr 01 2020 Ales Matej - 1.11.3-1 -- Update to 1.11.3 -- Prefer mirrorlist/metalink over baseurl (RhBug:1775184) - -* Mon Feb 10 2020 Ales Matej - 1.11.1-4 -- Fix calling Python API without holding GIL (RhBug:1788918) - -* Wed Feb 05 2020 Lukas Slebodnik - 1.11.1-3 -- Do not unref LrErr_Exception on exit (RhBug:1778854) - -* Wed Jan 29 2020 Fedora Release Engineering - 1.11.1-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - -* Mon Dec 09 2019 Pavla Kratochvilova - 1.11.1-1 -- Update to 1.11.1 -- Create a directory for gpg sockets in /run/user/ (RhBug:1769831,1771012) - -* Wed Nov 06 2019 Pavla Kratochvilova - 1.11.0-1 -- Update to 1.11.0 -- Retry mirrorlist/metalink downloads several times (RhBug:1741931) -- Improve variable substitutions in URLs and add ${variable} support - -* Tue Oct 01 2019 Ales Matej - 1.10.6-1 -- Update to 1.10.6 -- Imporove handling of xattr to re-download damadged files (RhBug:1690894) -- Rephrase repository GPG check error message (RhBug:1741442) -- Add sleep before next try when all mirrors were tried (RhBug:1741931) -- Raise logging level of error messages (RhBug:1737709) - -* Sun Aug 18 2019 Miro Hrončok - 1.10.5-2 -- Rebuilt for Python 3.8 - -* Mon Jul 29 2019 Pavla Kratochvilova - 1.10.5-1 -- Update to 1.10.5 -- Exit gpg-agent after repokey import (RhBug:1650266) -- Handle webservers that don't support ranges when downloading zck -- Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141) -- Allow to use mirrors multiple times for a target (RhBug:1678588) -- Allow to try baseurl multiple times (RhBug:1678588) - -* Thu Jul 25 2019 Fedora Release Engineering - 1.10.2-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - -* Thu May 23 2019 Jonathan Dieter - 1.10.2-2 -- Add upstream patch to make sure to check next transfer if current zck - transfer already exists - -* Mon May 20 2019 Pavla Kratochvilova - 1.10.2-1 -- Update to 1.10.2 -- Add an option to preserve timestamps of the downloaded files (RhBug:1688537) -- librepo: append the '?' part of repo URL after the path -- Fix librepo isn't able to load zchunk files from next server on failure - -* Tue Apr 02 2019 Pavla Kratochvilova - 1.9.6-2 -- Backport patch to fix segfault when using zchunk metadata - -* Wed Mar 27 2019 Pavla Kratochvilova - 1.9.6-1 -- Update to 1.9.6 -- Fix memory leaks -- Fix CPU usage when downloading packages (RhBug:1691856) - -* Mon Mar 11 2019 Pavla Kratochvilova - 1.9.5-1 -- Update to 1.9.5 -- Reduce download delays - -* Wed Feb 13 2019 Pavla Kratochvilova - 1.9.4-1 -- Update to 1.9.4-1 -- Add zchunk support - -* Fri Feb 01 2019 Fedora Release Engineering - 1.9.2-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - -* Mon Jan 28 2019 Miro Hrončok - 1.9.2-2 -- Subpackage python2-librepo has been removed - See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - -* Tue Sep 25 2018 Jaroslav Mracek - 1.9.2-1 -- Update to 1.9.2 -- Fix major performance regression with libcurl-7.61.1 - -* Mon Aug 13 2018 Daniel Mach - 1.9.1-1 -- Update to 1.9.1 - -* Fri Jul 13 2018 Fedora Release Engineering - 1.9.0-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Fri Jun 29 2018 Jaroslav Mracek - 1.9.0-3 -- Rebuilt for Python 3.7 - -* Tue Jun 26 2018 Igor Gnatenko - 1.9.0-2 -- Fix ldconfig_scriptlets once more - -* Tue Jun 26 2018 Jaroslav Mracek - 1.9.0-1 -- Update to 1.9.0 - -* Mon Jun 18 2018 Miro Hrončok - 1.8.1-9 -- Rebuilt for Python 3.7 - -* Fri Jun 15 2018 Miro Hrončok - 1.8.1-8 -- Bootstrap for Python 3.7 - -* Thu Feb 08 2018 Igor Gnatenko - 1.8.1-7 -- Add if conditionals around pyxattr - -* Wed Feb 07 2018 Iryna Shcherbina - 1.8.1-6 -- Update Python 2 dependency declarations to new packaging standards - (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - -* Wed Jan 31 2018 Igor Gnatenko - 1.8.1-5 -- Switch to %%ldconfig_scriptlets - -* Tue Nov 07 2017 Igor Gnatenko - 1.8.1-4 -- Use better Obsoletes for platform-python - -* Sat Nov 04 2017 Igor Gnatenko - 1.8.1-3 -- Fix typo in Obsoletes - -* Fri Nov 03 2017 Igor Gnatenko - 1.8.1-2 -- Remove platform-python subpackage - -* Fri Sep 15 2017 Igor Gnatenko - 1.8.1-1 -- Update to 1.8.1 - -* Fri Sep 01 2017 Igor Gnatenko - 1.8.0-2 -- Disable platform python on old releases - -* Wed Aug 23 2017 Igor Gnatenko - 1.8.0-1 -- Update to 1.8.0 - -* Fri Aug 18 2017 Tomas Orsava - 1.7.20-9 -- Added Patch 0 to fix a tearDown failure in the test suite - -* Thu Aug 10 2017 Petr Viktorin - 1.7.20-8 -- Add subpackage for platform-python (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack) - -* Thu Aug 03 2017 Fedora Release Engineering - 1.7.20-7 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Wed Jul 26 2017 Fedora Release Engineering - 1.7.20-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Fri Feb 10 2017 Fedora Release Engineering - 1.7.20-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Tue Dec 13 2016 Charalampos Stratakis - 1.7.20-4 -- Enable tests - -* Tue Dec 13 2016 Charalampos Stratakis - 1.7.20-3 -- Rebuild for Python 3.6 -- Disable tests for now - -* Sat Dec 10 2016 Igor Gnatenko - 1.7.20-2 -- Rebuild for gpgme 1.18 - -* Thu Aug 25 2016 Tomas Mlcoch - 1.7.20-1 -- Tests: Disable test_download_packages_with_resume_02 test -- Update build utils to match new fedora spec schema - -* Wed Aug 24 2016 Tomas Mlcoch - 1.7.19-1 -- Add yumrecord substitution mechanism (mluscon) -- Fix a memory leak in signature verification (cwalters) - -* Tue Aug 09 2016 Igor Gnatenko - 1.7.18-4 -- Add %%{?system_python_abi} -- Trim ton of changelog - -* Tue Jul 19 2016 Fedora Release Engineering - 1.7.18-3 -- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - -* Thu Apr 07 2016 Igor Gnatenko - 1.7.18-2 -- Adopt to new packaging guidelines -- Cleanups in spec file - -* Fri Mar 4 2016 Tomas Mlcoch - 1.7.18-1 -- Add new option LRO_FTPUSEEPSV -- Update AUTHORS -- downloader prepare_next_transfer(): simplify long line -- downloader prepare_next_transfer(): add missing error check -- downloader prepare_next_transfer(): cleanup error path -- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins) -- handle: Don't use proxy cache for downloads of metalink/mirrorlist -- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified -- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762) -- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new() -- New test: always try to download from the fastest mirror (Alexander Todorov) -- Doc: Fixed minor doc typo (Philippe Ombredanne) -- Doc: Other updates -- Doc: Update default values in doc to reflect reality diff --git a/sources b/sources index 4ecab35..a0fbef6 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (librepo-1.18.0.tar.gz) = 6630b4751163ff6a34c32b94f6d0ecdc34926ade6aa92342c99eef9a514edd25405e051c58f6630615dd9cd04ef5c0404ebc4805708356477b97d351baa19a73 +SHA512 (librepo-1.18.0.tar.gz) = 93b6aab2f37833b30bd423376dd975d76c73d251035e40cb0c1a6a1c84d1c68cf582ebe9d0c5e85bd50738871daf45b31da17c049bcdc92ac7e4adf723b98f42