Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libsoup for openSUSE:Factory checked in at 2026-06-17 16:17:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libsoup (Old) and /work/SRC/openSUSE:Factory/.libsoup.new.1981 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libsoup" Wed Jun 17 16:17:03 2026 rev:170 rq:1359806 version:3.6.6 Changes: -------- --- /work/SRC/openSUSE:Factory/libsoup/libsoup.changes 2026-05-30 22:55:16.961249002 +0200 +++ /work/SRC/openSUSE:Factory/.libsoup.new.1981/libsoup.changes 2026-06-17 16:17:43.801584064 +0200 @@ -1,0 +2,38 @@ +Fri May 29 10:33:40 UTC 2026 - Cliff Zhao <[email protected]> + +- Add libsoup-revert-dep-meson-0.62-part02-fd7ce01a.patch + Revert upstream commit fd7ce01a, this request drop methods + path() and build_root() which are deprecated on 0.62 but existed + in 0.54. +- This fix could enable the libsoup update to the latest verion in + SLE-15-SP4 and SP5, which fix many CVE bugs. +- This fix only enable on SLE-15-SP4 and SP5 in SPEC file. + +------------------------------------------------------------------- +Fri May 29 10:25:28 UTC 2026 - Cliff Zhao <[email protected]> + +- Add libsoup-revert-dep-meson-0.62-part01-4209dbec.patch: + Revert upstream commit 4209dbec, this request bump meson version + from 0.54 to 0.62. +- This fix could enable the libsoup update to the latest verion in + SLE-15-SP4 and SP5, which fix many CVE bugs. +- This fix only enable on SLE-15-SP4 and SP5 in SPEC file. + +------------------------------------------------------------------- +Fri May 29 10:18:43 UTC 2026 - Cliff Zhao <[email protected]> + +- Add libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch: + Revert upstream commit 6b34bc58, this request tell gir that + doc-format is gi-docgen, this version() check function requires + meson 0.62. +- This fix only enable on SLE-15-SP4 and SP5 in SPEC file. + +------------------------------------------------------------------- +Fri May 29 10:02:12 UTC 2026 - Cliff Zhao <[email protected]> + +- Add libsoup-revert-dep-meson-0.62-shim01-e315cf2d.patch: + Revert upstream commit e315cf2d, this request add --quiet and + --warn-all args to gir in meson.build. +- This fix only enable on SLE-15-SP4 and SP5 in SPEC file. + +------------------------------------------------------------------- @@ -4,2 +42,3 @@ -- Add libsoup-CVE-2026-4271.patch: Protect message io while reading - and writing (bsc#1259767, CVE-2026-4271, glgo#GNOME/libsoup#496). +- Add libsoup-CVE-2026-4271.patch: + Protect message io while reading and writing. + (bsc#1259767, CVE-2026-4271, glgo#GNOME/libsoup#496) @@ -15,3 +54,3 @@ -- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read when - reading unmasked frame (bsc#1256418 CVE-2026-0716 - glgo#GNOME/libsoup!518). +- Add libsoup-CVE-2026-0716.patch: + Fix out-of-bounds read when reading unmasked frame. + (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!518) @@ -22,3 +61,3 @@ -- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization - header on cross origin redirect - (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489). +- Add libsoup-CVE-2026-1539.patch: + Also remove Proxy-Authorization header on cross origin redirect. + (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489) New: ---- libsoup-revert-dep-meson-0.62-part01-4209dbec.patch libsoup-revert-dep-meson-0.62-part02-fd7ce01a.patch libsoup-revert-dep-meson-0.62-shim01-e315cf2d.patch libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch ----------(New B)---------- New: - Add libsoup-revert-dep-meson-0.62-part01-4209dbec.patch: Revert upstream commit 4209dbec, this request bump meson version New: - Add libsoup-revert-dep-meson-0.62-part02-fd7ce01a.patch Revert upstream commit fd7ce01a, this request drop methods New: - Add libsoup-revert-dep-meson-0.62-shim01-e315cf2d.patch: Revert upstream commit e315cf2d, this request add --quiet and New: - Add libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch: Revert upstream commit 6b34bc58, this request tell gir that ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libsoup.spec ++++++ --- /var/tmp/diff_new_pack.xOXrF5/_old 2026-06-17 16:17:45.009634610 +0200 +++ /var/tmp/diff_new_pack.xOXrF5/_new 2026-06-17 16:17:45.013634777 +0200 @@ -26,22 +26,26 @@ URL: https://wiki.gnome.org/Projects/libsoup Source0: %{name}-%{version}.tar.xz Source99: baselibs.conf - # PATCH-FIX-UPSTREAM libsoup-CVE-2026-0719.patch bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493 [email protected] -- Fix overflow for password md4sum -Patch10: libsoup-CVE-2026-0719.patch - +Patch1: libsoup-CVE-2026-0719.patch # PATCH-FIX-OPENSUSE libsoup-CVE-2025-32049.patch bsc#1240751 [email protected] -- add size limit for total message size. -Patch14: libsoup-CVE-2025-32049.patch - +Patch2: libsoup-CVE-2025-32049.patch # PATCH-FIX-UPSTREAM libsoup-CVE-2026-2708.patch bsc#1258508 [email protected] -- do not allow adding multiple content length values to headers. -Patch17: libsoup-CVE-2026-2708.patch +Patch3: libsoup-CVE-2026-2708.patch # PATCH-FIX-UPSTREAM libsoup-CVE-2026-1539.patch bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489 -- Also remove Proxy-Authorization header on cross origin redirect -Patch18: libsoup-CVE-2026-1539.patch +Patch4: libsoup-CVE-2026-1539.patch # PATCH-FIX-UPSTREAM libsoup-CVE-2026-0716.patch bsc#1256418 [email protected] -- websocket: Fix out-of-bounds read when reading unmasked frame -Patch19: libsoup-CVE-2026-0716.patch +Patch5: libsoup-CVE-2026-0716.patch # PATCH-FIX-UPSTREAM libsoup-CVE-2026-4271.patch bsc#1259767 [email protected] -- protect message io while reading and writing -Patch20: libsoup-CVE-2026-4271.patch - +Patch6: libsoup-CVE-2026-4271.patch +# PATCH-FIX-SLE libsoup-revert-dep-meson-0.62-shim01-e315cf2d.patch [email protected] -- Revert upstream e315cf2d to make libsoup build with meson 0.54 for SLE-15-SP4/SP5. +Patch1000: libsoup-revert-dep-meson-0.62-shim01-e315cf2d.patch +# PATCH-FIX-SLE libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch [email protected] -- Revert upstream 6b34bc58 to make libsoup build with meson 0.54 for SLE-15-SP4/SP5. +Patch1001: libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch +# PATCH-FIX-SLE libsoup-revert-dep-meson-0.62-part01-4209dbec.patch [email protected] -- Revert upstream 4209dbec to make libsoup build with meson 0.54 for SLE-15-SP4/SP5. +Patch1002: libsoup-revert-dep-meson-0.62-part01-4209dbec.patch +# PATCH-FIX-SLE libsoup-revert-dep-meson-0.62-part02-fd7ce01a.patch [email protected] -- Revert upstream fd7ce01a to make libsoup build with meson 0.54 for SLE-15-SP4/SP5. +Patch1003: libsoup-revert-dep-meson-0.62-part02-fd7ce01a.patch BuildRequires: glib-networking BuildRequires: meson >= 0.53 BuildRequires: pkgconfig @@ -130,7 +134,11 @@ %lang_package %prep -%autosetup -p1 +%autosetup -N +%autopatch -p1 -M 999 +%if 0%{?sle_version} >= 150400 && 0%{?sle_version} <= 155000 +%autopatch -p1 -m 1000 +%endif %build %meson \ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.xOXrF5/_old 2026-06-17 16:17:45.049636284 +0200 +++ /var/tmp/diff_new_pack.xOXrF5/_new 2026-06-17 16:17:45.053636451 +0200 @@ -1,6 +1,6 @@ -mtime: 1779851962 -commit: 23e8e6291088c302da6310fc6217d04ffd26fee1c8dc650123d4c4de13312a3b +mtime: 1781526322 +commit: 0e87880586cfa1e734d015a2262cf5c180261cadab5bb160d6158647acd4dae7 url: https://src.opensuse.org/GNOME/libsoup -revision: 23e8e6291088c302da6310fc6217d04ffd26fee1c8dc650123d4c4de13312a3b +revision: 0e87880586cfa1e734d015a2262cf5c180261cadab5bb160d6158647acd4dae7 projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-06-15 14:25:22.000000000 +0200 @@ -0,0 +1,5 @@ +*.obscpio +*.osc +_build.* +.pbuild +osc-collab.* ++++++ libsoup-revert-dep-meson-0.62-part01-4209dbec.patch ++++++ diff a/meson.build b/meson.build --- a/meson.build +++ b/meson.build @@ -1,6 +1,6 @@ project('libsoup', 'c', version: '3.6.6', - meson_version : '>= 0.62', + meson_version : '>= 0.54', license : 'LGPL-2.0-or-later', default_options : [ 'c_std=gnu99', ++++++ libsoup-revert-dep-meson-0.62-part02-fd7ce01a.patch ++++++ diff a/meson.build b/meson.build --- a/meson.build +++ b/meson.build @@ -243,18 +243,18 @@ apache_httpd2 = find_program('httpd2', 'httpd', 'apache2', 'apache', have_apache=false apache_httpd2_version = '' if apache_httpd2.found() and apachectl.found() - apache_httpd2_version_raw = run_command(apachectl.full_path(), '-v', check: false) + apache_httpd2_version_raw = run_command(apachectl.path(), '-v', check: false) # It seems that from version 2.4.39 apachectl doesn't take arguments, fallback # to calling apache directly just in case. if apache_httpd2_version_raw.returncode() != 0 - apache_httpd2_version_raw = run_command(apache_httpd2.full_path(), '-v', check: false) + apache_httpd2_version_raw = run_command(apache_httpd2.path(), '-v', check: false) endif if apache_httpd2_version_raw.returncode() == 0 apache_httpd2_version = apache_httpd2_version_raw.stdout().split('\n')[0] apache_httpd2_version = apache_httpd2_version.split('/')[1].split(' ')[0] if apache_httpd2_version.version_compare('>=2.4') have_apache = true - cdata.set_quoted('APACHE_HTTPD', apache_httpd2.full_path()) + cdata.set_quoted('APACHE_HTTPD', apache_httpd2.path()) else message('Found ' + apache_httpd2_version + ', but at least 2.4 is needed - ignoring') endif @@ -262,11 +262,11 @@ if apache_httpd2.found() and apachectl.found() endif if have_apache - apache_modules_dirs_out = run_command('get_apache_modules_dirs.py', apachectl.full_path(), check: false) + apache_modules_dirs_out = run_command('get_apache_modules_dirs.py', apachectl.path(), check: false) have_apache = (apache_modules_dirs_out.returncode() == 0) # Same as above, using apachectl might fail, try apache directly. if not have_apache - apache_modules_dirs_out = run_command('get_apache_modules_dirs.py', apache_httpd2.full_path(), check: false) + apache_modules_dirs_out = run_command('get_apache_modules_dirs.py', apache_httpd2.path(), check: false) have_apache = (apache_modules_dirs_out.returncode() == 0) endif if have_apache @@ -330,7 +330,7 @@ if host_machine.system() != 'windows' if ntlm_auth.found() add_project_arguments('-DUSE_NTLM_AUTH=1', language : 'c') - add_project_arguments('-DNTLM_AUTH="' + ntlm_auth.full_path() + '"', language : 'c') + add_project_arguments('-DNTLM_AUTH="' + ntlm_auth.path() + '"', language : 'c') endif else ntlm_auth = dependency('', required: false) diff --git a/tests/autobahn/meson.build b/tests/autobahn/meson.build index a29fdcfc..e78ff4a7 100644 --- a/tests/autobahn/meson.build +++ b/tests/autobahn/meson.build @@ -1,5 +1,5 @@ autobahn_conf = configuration_data() -autobahn_conf.set('MESON_BUILD_ROOT', meson.project_build_root()) +autobahn_conf.set('MESON_BUILD_ROOT', meson.build_root()) configure_file( input : 'autobahn-server.json.in', diff --git a/tests/meson.build b/tests/meson.build index aaef58c3..ac892359 100644 --- a/tests/meson.build +++ b/tests/meson.build @@ -180,7 +180,7 @@ env.set('G_TEST_SRCDIR', meson.current_source_dir()) env.set('G_TEST_BUILDDIR', meson.current_build_dir()) env.set('G_DEBUG', 'gc-friendly') # See https://github.com/mesonbuild/meson/issues/1383 for the workaround below -env.prepend('LD_LIBRARY_PATH', meson.project_build_root() + '/libsoup') +env.prepend('LD_LIBRARY_PATH', meson.build_root() + '/libsoup') env.set('MALLOC_CHECK_', '2') # This is set by Meson if empty env.set('MALLOC_PERTURB_', '') ++++++ libsoup-revert-dep-meson-0.62-shim01-e315cf2d.patch ++++++ diff a/libsoup/meson.build b/libsoup/meson.build --- a/libsoup/meson.build +++ b/libsoup/meson.build @@ -263,8 +263,6 @@ if enable_introspection or enable_vapi libsoup_gir_extra_args = [ libsoup_c_args, - '--warn-all', - '--quiet', ] if gir.version().version_compare('>=1.83.2') libsoup_gir_extra_args += [ ++++++ libsoup-revert-dep-meson-0.62-shim02-6b34bc58.patch ++++++ diff a/libsoup/meson.build b/libsoup/meson.build --- a/libsoup/meson.build +++ b/libsoup/meson.build @@ -261,15 +261,6 @@ libsoup_static_dep = declare_dependency(link_with : libsoup_static, if enable_introspection or enable_vapi soup_ns = 'Soup' - libsoup_gir_extra_args = [ - libsoup_c_args, - ] - if gir.version().version_compare('>=1.83.2') - libsoup_gir_extra_args += [ - '--doc-format=gi-docgen', - ] - endif - soup_gir_gen_sources = gnome.generate_gir(libsoup, sources : [ soup_sources, @@ -283,7 +274,7 @@ if enable_introspection or enable_vapi symbol_prefix : soup_ns.to_lower(), identifier_prefix : soup_ns, export_packages : libsoup_api_name, - extra_args : libsoup_gir_extra_args, + extra_args : libsoup_c_args, includes : 'Gio-2.0', install : true, header: join_paths(meson.project_name(), 'soup.h'),
