Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libmicrohttpd for openSUSE:Factory checked in at 2026-06-30 15:11:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libmicrohttpd (Old) and /work/SRC/openSUSE:Factory/.libmicrohttpd.new.11887 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libmicrohttpd" Tue Jun 30 15:11:07 2026 rev:51 rq:1362324 version:1.0.5 Changes: -------- --- /work/SRC/openSUSE:Factory/libmicrohttpd/libmicrohttpd.changes 2026-04-05 18:24:00.545554959 +0200 +++ /work/SRC/openSUSE:Factory/.libmicrohttpd.new.11887/libmicrohttpd.changes 2026-06-30 15:11:12.851533007 +0200 @@ -1,0 +2,17 @@ +Sat Apr 18 10:21:18 UTC 2026 - Dirk Müller <[email protected]> + +- update to 1.0.5 : + * It fixes a additional HTTP request smuggling issues + (CWE-444). +- drop libmicrohttpd-1.0.4-Fixed-missing-MHD_VERSION-bump.patch + (obsolete) + +------------------------------------------------------------------- +Tue Apr 14 19:53:22 UTC 2026 - Andreas Stieger <[email protected]> + +- libmicrohttpd 1.0.4: + * fix a HTTP request smuggling issue (CWE-444, boo#1262119) +- add libmicrohttpd-1.0.4-Fixed-missing-MHD_VERSION-bump.patch to + fix tests + +------------------------------------------------------------------- Old: ---- libmicrohttpd-1.0.3.tar.gz libmicrohttpd-1.0.3.tar.gz.sig New: ---- libmicrohttpd-1.0.5.tar.gz libmicrohttpd-1.0.5.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libmicrohttpd.spec ++++++ --- /var/tmp/diff_new_pack.OsVHCA/_old 2026-06-30 15:11:13.643559919 +0200 +++ /var/tmp/diff_new_pack.OsVHCA/_new 2026-06-30 15:11:13.643559919 +0200 @@ -1,7 +1,7 @@ # # spec file for package libmicrohttpd # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # Copyright (c) 2010,2011,2012 Stephan Kleine # Copyright (c) 2026 Andreas Stieger <[email protected]> # @@ -21,7 +21,7 @@ %global sover 12 %global libname %{name}%{sover} Name: libmicrohttpd -Version: 1.0.3 +Version: 1.0.5 Release: 0 Summary: Small Embeddable HTTP Server Library # Some internal tests are licenced as GPL-3.0+ - they are only used in ++++++ libmicrohttpd-1.0.3.tar.gz -> libmicrohttpd-1.0.5.tar.gz ++++++ ++++ 2455 lines of diff (skipped)
