Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libostree for openSUSE:Factory checked in at 2026-08-09 21:32:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libostree (Old) and /work/SRC/openSUSE:Factory/.libostree.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libostree" Sun Aug 9 21:32:51 2026 rev:55 rq:1370183 version:2026.3 Changes: -------- --- /work/SRC/openSUSE:Factory/libostree/libostree.changes 2026-07-29 18:58:22.951851700 +0200 +++ /work/SRC/openSUSE:Factory/.libostree.new.16738/libostree.changes 2026-08-09 21:34:00.339451500 +0200 @@ -1,0 +2,9 @@ +Thu Aug 6 20:27:52 UTC 2026 - Andreas Stieger <[email protected]> + +- Update to 2026.3: + * Unbounded LZMA decompression in static delta processing allows + denial of service via decompression (boo#1273918) + * Heap buffer overflow via integer truncation in static delta + bspatch on 32-bit systems (boo#1273917) + +------------------------------------------------------------------- Old: ---- libostree-2026.2.tar.xz New: ---- libostree-2026.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libostree.spec ++++++ --- /var/tmp/diff_new_pack.T3DLau/_old 2026-08-09 21:34:00.911471012 +0200 +++ /var/tmp/diff_new_pack.T3DLau/_new 2026-08-09 21:34:00.915471148 +0200 @@ -24,7 +24,7 @@ %bcond_without ed25519 %bcond_with tests Name: libostree -Version: 2026.2 +Version: 2026.3 Release: 0 Summary: Git for operating system binaries License: LGPL-2.0-or-later ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.T3DLau/_old 2026-08-09 21:34:00.951472376 +0200 +++ /var/tmp/diff_new_pack.T3DLau/_new 2026-08-09 21:34:00.955472513 +0200 @@ -1,6 +1,6 @@ -mtime: 1785050693 -commit: c98e1eb110fba91bebb4cc4b08bcdc62f1a0725e98776484676933f1082db37b +mtime: 1786048222 +commit: c41debb0476ba3192f2487ee586056936c4e4fdaa4e3ce4def1e921c344640d7 url: https://src.opensuse.org/GNOME/libostree -revision: c98e1eb110fba91bebb4cc4b08bcdc62f1a0725e98776484676933f1082db37b +revision: c41debb0476ba3192f2487ee586056936c4e4fdaa4e3ce4def1e921c344640d7 projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-06 22:30:22.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ libostree-2026.2.tar.xz -> libostree-2026.3.tar.xz ++++++ ++++ 3022 lines of diff (skipped)
