Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package cyrus-imapd for openSUSE:Factory 
checked in at 2025-07-21 19:59:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cyrus-imapd (Old)
 and      /work/SRC/openSUSE:Factory/.cyrus-imapd.new.8875 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "cyrus-imapd"

Mon Jul 21 19:59:32 2025 rev:4 rq:1294442 version:3.8.6

Changes:
--------
--- /work/SRC/openSUSE:Factory/cyrus-imapd/cyrus-imapd.changes  2025-05-31 
19:17:17.979831364 +0200
+++ /work/SRC/openSUSE:Factory/.cyrus-imapd.new.8875/cyrus-imapd.changes        
2025-07-21 20:00:04.126507648 +0200
@@ -1,0 +2,25 @@
+Fri Jul 18 13:03:45 UTC 2025 - Matthias Gerstner <matthias.gerst...@suse.com>
+
+- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
+  release line occuring with newer compilers.
+
+-------------------------------------------------------------------
+Tue Jul 15 12:09:11 UTC 2025 - Peter Varkoly <vark...@suse.com>
+
+- update to version 3.8.6 (bugfix release)
+  VUL-0: CVE-2025-49812: cyrus-imapd: Opossum Attack Application Layer
+  Desynchronization using Opportunistic TLS (bsc#1246165)
+  The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of
+  implicit TLS over a dedicated port.  STARTTLS is now disabled by default.
+  * Fixed issue #5477: master: tighten up pidfile/etc handling (bsc#1241543)
+    VUL-0: cyrus-imapd: privilege drop happens too late, opening attack 
vectors from cyrus to root
+  * Fixed issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)
+  * Fixed issue #5309: deadlock on shutdown (thanks Mark Cammidge)
+  * Fixed issue #5424: recognise service-specific SASL options in
+    ``cyr_info conf-lint``
+  * Fixed issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)
+  * Fixed issue #5460: pop3d: add basic prometheus support (thanks Wolfgang
+    Breyha)
+  * Fixed issue #5454: httpd fails to parse OpenSSL version for status string
+
+-------------------------------------------------------------------

Old:
----
  cyrus-imapd-3.8.5.tar.gz
  cyrus-imapd-3.8.5.tar.gz.sig

New:
----
  0001-Squash-some-clang-complaints.patch
  cyrus-imapd-3.8.6.tar.gz
  cyrus-imapd-3.8.6.tar.gz.sig

----------(New B)----------
  New:
- add 0001-Squash-some-clang-complaints.patch: fix compile errors in 3.8
  release line occuring with newer compilers.
----------(New E)----------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ cyrus-imapd.spec ++++++
--- /var/tmp/diff_new_pack.bh9XQy/_old  2025-07-21 20:00:05.074547100 +0200
+++ /var/tmp/diff_new_pack.bh9XQy/_new  2025-07-21 20:00:05.074547100 +0200
@@ -30,7 +30,7 @@
 %global _servicename    cyrus-imapd
 %define _sover 0
 Name:           cyrus-imapd
-Version:        3.8.5
+Version:        3.8.6
 Release:        0
 Summary:        The Cyrus IMAP and POP Mail Server
 License:        BSD-3-Clause
@@ -51,6 +51,7 @@
 # PATCH-FIX-FEDORA -- Link Perl components against pcre2
 # pending upstream discussion
 Patch8:         perl-pcre2.patch
+Patch9:         0001-Squash-some-clang-complaints.patch
 
 BuildRequires:  autoconf >= 2.63
 BuildRequires:  automake
@@ -106,7 +107,7 @@
 %endif
 %endif
 
-%sysusers_requires
+#%%sysusers_requires
 Prereq:         system-user-mail
 Requires:       perl-Cyrus-Annotator = %{version}
 Requires:       perl-Cyrus-IMAP = %{version}

++++++ 0001-Squash-some-clang-complaints.patch ++++++
>From f187c82604997991121c913732ffd95c161cbe27 Mon Sep 17 00:00:00 2001
From: Ken Murchison <mu...@fastmail.com>
Date: Mon, 27 Feb 2023 11:09:51 -0500
Subject: [PATCH] Squash some clang complaints

---
 backup/cyr_backup.c | 3 ---
 imap/httpd.h        | 2 +-
 imap/reconstruct.c  | 2 +-
 imap/squat_build.c  | 4 ----
 imap/zoneinfo_db.c  | 3 ++-
 5 files changed, 4 insertions(+), 10 deletions(-)

diff --git a/backup/cyr_backup.c b/backup/cyr_backup.c
index 07d534454..ec3f752bd 100644
--- a/backup/cyr_backup.c
+++ b/backup/cyr_backup.c
@@ -730,7 +730,6 @@ static int cmd_json_chunks(struct backup *backup,
     struct backup_chunk *chunk = NULL;
     json_t *jchunks = NULL;
     struct stat data_stat_buf;
-    double total_length = 0.0;
     int r;
 
     (void) options;
@@ -759,8 +758,6 @@ static int cmd_json_chunks(struct backup *backup,
             ratio = 100.0 * (data_stat_buf.st_size - chunk->offset) / 
chunk->length;
         }
 
-        total_length += chunk->length;
-
         /* XXX which fields do we want? */
         json_object_set_new(jchunk, "id", json_integer(chunk->id));
         json_object_set_new(jchunk, "offset", json_integer(chunk->offset));
diff --git a/imap/httpd.h b/imap/httpd.h
index 67279a942..43cf8205b 100644
--- a/imap/httpd.h
+++ b/imap/httpd.h
@@ -280,7 +280,7 @@ struct range {
 
 struct patch_doc_t {
     const char *format;                 /* MIME format of patch document */
-    int (*proc)();                      /* Function to parse and apply doc */
+    int (*proc)(txn_t *, void *);       /* Function to parse and apply doc */
 };
 
 typedef int (*encode_proc_t)(struct transaction_t *txn,
diff --git a/imap/reconstruct.c b/imap/reconstruct.c
index d5f355653..58f215a4b 100644
--- a/imap/reconstruct.c
+++ b/imap/reconstruct.c
@@ -821,7 +821,7 @@ static void reconstruct_mbentry(const char *header_path)
                         mbentry->mbtype &= ~(MBTYPE_LEGACY_DIRS);
 
                         token = tok_next(&tok);
-                        if (strcmpnull(token, FNAME_HEADER+1) || 
tok_next(&tok)) {
+                        if (strcmpnull(token, &FNAME_HEADER[1]) || 
tok_next(&tok)) {
                             xzfree(mbentry->uniqueid);
                         }
                     }
diff --git a/imap/squat_build.c b/imap/squat_build.c
index b56717f30..b7dd51867 100644
--- a/imap/squat_build.c
+++ b/imap/squat_build.c
@@ -1163,7 +1163,6 @@ static int dump_doc_list_present_bits(SquatIndex *index,
     int start_present = docs->first_valid_entry;
     int end_present = docs->last_valid_entry;
     char *buf;
-    int present_count;
 
     /* If the leaf is empty, we should never get here! */
     assert(start_present <= end_present);
@@ -1175,7 +1174,6 @@ static int dump_doc_list_present_bits(SquatIndex *index,
             return SQUAT_ERR;
         } else {
             *buf++ = (char)end_present;
-            present_count = 1;
         }
     } else {
         int first_byte = start_present >> 3;
@@ -1191,10 +1189,8 @@ static int dump_doc_list_present_bits(SquatIndex *index,
             *buf++ = (char)first_byte;
             *buf++ = (char)byte_count - 1;
             memset(buf, 0, byte_count);
-            present_count = 0;
             for (i = start_present; i <= end_present; i++) {
                 if (docs->docs[i] != NULL) {
-                    present_count++;
                     buf[(i >> 3) - first_byte] |= 1 << (i & 7);
                 }
             }
diff --git a/imap/zoneinfo_db.c b/imap/zoneinfo_db.c
index 3be631ccd..46f7c661a 100644
--- a/imap/zoneinfo_db.c
+++ b/imap/zoneinfo_db.c
@@ -243,7 +243,8 @@ struct findrock {
     const char *find;
     int tzid_only;
     time_t changedsince;
-    int (*proc)();
+    int (*proc)(const char *tzid, int tzidlen,
+                struct zoneinfo *zi, void *rock);
     void *rock;
 };
 
-- 
2.49.0


++++++ cyrus-imapd-3.8.5.tar.gz -> cyrus-imapd-3.8.6.tar.gz ++++++
/work/SRC/openSUSE:Factory/cyrus-imapd/cyrus-imapd-3.8.5.tar.gz 
/work/SRC/openSUSE:Factory/.cyrus-imapd.new.8875/cyrus-imapd-3.8.6.tar.gz 
differ: char 13, line 1

Reply via email to