Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nut for openSUSE:Factory checked in at 2026-07-23 23:34:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nut (Old) and /work/SRC/openSUSE:Factory/.nut.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "nut" Thu Jul 23 23:34:28 2026 rev:85 rq:1367500 version:2.8.5 Changes: -------- --- /work/SRC/openSUSE:Factory/nut/nut.changes 2026-05-06 19:24:50.022250742 +0200 +++ /work/SRC/openSUSE:Factory/.nut.new.2004/nut.changes 2026-07-23 23:34:29.711164741 +0200 @@ -1,0 +2,7 @@ +Mon Jul 20 18:56:16 UTC 2026 - Marius Grossu <[email protected]> + +- Fix CVE-2026-54161, remote OS command injection via ups.alarm in NOTIFYCMD + (CVE-2026-54161, bsc#1270050) + * CVE-2026-54161.patch + +------------------------------------------------------------------- New: ---- CVE-2026-54161.patch ----------(New B)---------- New: (CVE-2026-54161, bsc#1270050) * CVE-2026-54161.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nut.spec ++++++ --- /var/tmp/diff_new_pack.otXCpx/_old 2026-07-23 23:34:30.967208770 +0200 +++ /var/tmp/diff_new_pack.otXCpx/_new 2026-07-23 23:34:30.971208910 +0200 @@ -81,6 +81,8 @@ Patch3: harden_nut-driver.service.patch Patch4: harden_nut-monitor.service.patch Patch5: harden_nut-server.service.patch +# PATCH-FIX-SUSE bsc#1270050 [email protected] CVE-2026-54161 +Patch6: CVE-2026-54161.patch BuildRequires: apache-rpm-macros BuildRequires: asciidoc BuildRequires: fdupes ++++++ CVE-2026-54161.patch ++++++ ++++ 1034 lines (skipped)
