Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package PackageKit for openSUSE:Factory checked in at 2026-04-28 11:54:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/PackageKit (Old) and /work/SRC/openSUSE:Factory/.PackageKit.new.11940 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "PackageKit" Tue Apr 28 11:54:04 2026 rev:244 rq:1349346 version:1.3.5 Changes: -------- --- /work/SRC/openSUSE:Factory/PackageKit/PackageKit.changes 2026-03-06 18:17:05.640423584 +0100 +++ /work/SRC/openSUSE:Factory/.PackageKit.new.11940/PackageKit.changes 2026-04-28 11:54:38.221175954 +0200 @@ -1,0 +2,33 @@ +Thu Apr 23 01:27:31 UTC 2026 - Jonathan Kang <[email protected]> + +- Update to version 1.3.5: + + This release fixes a critical security vulnerability that allows + unprivileged local users to obtain root privileges on any + distribution that uses PackageKit. Details will be disclosed + very soon, please update to a fixed version of PackageKit + immediately (ensure the patch from commit + 76cfb675fb31acc3ad5595d4380bfff56d2a8697 is applied). + + Drop slack backend + + alpm: perform sysupgrade on install and update + + freebsd: Fix crashing when libpkg asks about ABI mismatch + + portage: Revamp backend + + meson: test.depends does not accept a dummy dependency, give it + an empty array instead + + pkgcli: Set up proxy also if only PAC is available + + Do not allow re-invoking methods on non-new transactions + + packagekit/progress: updated old usage of raise StopIteration + + pkgcli: Add TRANSLATORS comments for commands + + pkgcli: Rename list-required-by to list-requiring +- Drop 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch: + fixed upstream. +- Drop 11c5f1f34f48b58ee10acec839dd01a31728704b.patch: + fixed upstream. + +------------------------------------------------------------------- +Wed Apr 22 00:49:23 UTC 2026 - Jonathan Kang <[email protected]> + +- Add 0001-Do-not-allow-re-invoking-methods-on-non-new-txn.patch: + Do not allow re-invoking methods on non-new transactions + (bsc#1262220, CVE-2026-41651). + +------------------------------------------------------------------- Old: ---- 11c5f1f34f48b58ee10acec839dd01a31728704b.patch PackageKit-1.3.4.tar.xz PackageKit-1.3.4.tar.xz.asc New: ---- PackageKit-1.3.5.tar.xz PackageKit-1.3.5.tar.xz.asc _scmsync.obsinfo build.specials.obscpio ----------(Old B)---------- Old: fixed upstream. - Drop 11c5f1f34f48b58ee10acec839dd01a31728704b.patch: fixed upstream. ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ PackageKit.spec ++++++ --- /var/tmp/diff_new_pack.CvPUNc/_old 2026-04-28 11:54:39.277219561 +0200 +++ /var/tmp/diff_new_pack.CvPUNc/_new 2026-04-28 11:54:39.277219561 +0200 @@ -27,7 +27,7 @@ %endif Name: PackageKit -Version: 1.3.4 +Version: 1.3.5 Release: 0 Summary: Simple software installation management software License: GPL-2.0-or-later @@ -38,14 +38,12 @@ Source3: PackageKit.tmpfiles Source99: PackageKit.keyring -# PATCH-FIX-UPSTREAM -Patch0: https://github.com/PackageKit/PackageKit/commit/11c5f1f34f48b58ee10acec839dd01a31728704b.patch # PATCH-FEATURE-OPENSUSE PackageKit-systemd-timers.patch bsc#1115410 [email protected] -- Migrate from cron to systemd timers -Patch1: PackageKit-systemd-timers.patch +Patch0: PackageKit-systemd-timers.patch # PATCH-FIX-OPENSUSE PackageKit-remove-polkit-rules.patch bsc#1125434 [email protected] -- Remove polkit rules file -Patch2: PackageKit-remove-polkit-rules.patch +Patch1: PackageKit-remove-polkit-rules.patch # PATCH-FIX-OPENSUSE PackageKit-alias-dnf-to-dnf5.patch [email protected] -- Handle replacing dnf with dnf5 -Patch3: PackageKit-alias-dnf-to-dnf5.patch +Patch2: PackageKit-alias-dnf-to-dnf5.patch BuildRequires: docbook5-xsl-stylesheets BuildRequires: fdupes ++++++ PackageKit-1.3.4.tar.xz -> PackageKit-1.3.5.tar.xz ++++++ ++++ 82459 lines of diff (skipped) ++++++ _scmsync.obsinfo ++++++ mtime: 1777194664 commit: ceec88bf26b1ae8be9b63c7313be0ce6594d4b92abed0cd8e56fe116ea7f84ba url: https://src.opensuse.org/GNOME/PackageKit revision: ceec88bf26b1ae8be9b63c7313be0ce6594d4b92abed0cd8e56fe116ea7f84ba projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-04-26 11:11:04.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild
