Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package lyx for openSUSE:Factory checked in at 2026-08-18 16:36:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lyx (Old) and /work/SRC/openSUSE:Factory/.lyx.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lyx" Tue Aug 18 16:36:01 2026 rev:119 rq:1371594 version:2.5.2 Changes: -------- --- /work/SRC/openSUSE:Factory/lyx/lyx.changes 2026-04-25 21:36:26.915521045 +0200 +++ /work/SRC/openSUSE:Factory/.lyx.new.1258/lyx.changes 2026-08-18 16:36:37.507233007 +0200 @@ -1,0 +2,15 @@ +Mon Aug 17 14:06:14 UTC 2026 - Cor Blom <[email protected]> + +- Update to 2.5.2: + * Most important are security fixes, among which: + + New consent authorization gate for unpatched external tools + processing gate prompts before running a code-capable bib/index tools + (biber/xindy/xindex) on an untrusted document, + The real fixes are upstream (biber 2.22, xindex 1.07, xindy from up-to-date + TL tree), while the gate is LyX's interim guard. + For biber 2.22 the gate automatically relaxes to no-op. + xindex version check relaxing the gate above. + * Details about this and other fixes can be found in the included + ANNOUNCE or https://www.lyx.org/announce/2_5_2.txt + +------------------------------------------------------------------- Old: ---- lyx-2.5.1.tar.xz lyx-2.5.1.tar.xz.sig New: ---- lyx-2.5.2.tar.xz lyx-2.5.2.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lyx.spec ++++++ --- /var/tmp/diff_new_pack.umMLdJ/_old 2026-08-18 16:36:39.287296688 +0200 +++ /var/tmp/diff_new_pack.umMLdJ/_new 2026-08-18 16:36:39.292296867 +0200 @@ -21,7 +21,7 @@ %endif Name: lyx -Version: 2.5.1 +Version: 2.5.2 Release: 0 Summary: WYSIWYM (What You See Is What You Mean) document processor License: GPL-2.0-or-later ++++++ lyx-2.5.1.tar.xz -> lyx-2.5.2.tar.xz ++++++ /work/SRC/openSUSE:Factory/lyx/lyx-2.5.1.tar.xz /work/SRC/openSUSE:Factory/.lyx.new.1258/lyx-2.5.2.tar.xz differ: char 15, line 1
