Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package OpenRGB for openSUSE:Factory checked in at 2026-08-25 13:19:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/OpenRGB (Old) and /work/SRC/openSUSE:Factory/.OpenRGB.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "OpenRGB" Tue Aug 25 13:19:08 2026 rev:14 rq:1373404 version:1.0~rc3+git13.g1e1fb098 Changes: -------- --- /work/SRC/openSUSE:Factory/OpenRGB/OpenRGB.changes 2026-08-14 22:07:00.125050886 +0200 +++ /work/SRC/openSUSE:Factory/.OpenRGB.new.1258/OpenRGB.changes 2026-08-25 13:19:18.080291935 +0200 @@ -1,0 +2,7 @@ +Thu Aug 13 12:07:40 UTC 2026 - Matthias Gerstner <[email protected]> + +- add harden-network.patch: don't listen on all interfaces by default. Users + can override this by passing a different `--server-host` command line + parameter. + +------------------------------------------------------------------- New: ---- harden-network.patch ----------(New B)---------- New: - add harden-network.patch: don't listen on all interfaces by default. Users can override this by passing a different `--server-host` command line ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ OpenRGB.spec ++++++ --- /var/tmp/diff_new_pack.6TvZyz/_old 2026-08-25 13:19:19.257333382 +0200 +++ /var/tmp/diff_new_pack.6TvZyz/_new 2026-08-25 13:19:19.259333453 +0200 @@ -29,6 +29,7 @@ Source2: openrgb-udev.conf # Restrict i2c access and remove /dev/port permissions (bsc#1215130) Patch0: OpenRGB-udev-i2c-use-group.patch +Patch1: harden-network.patch # Leap 15.6 and below cannot use the default GCC7 due to std::filesystem. # Picking GCC13 as this works with position independent executables %if 0%{?suse_version} < 1600 ++++++ harden-network.patch ++++++ Index: OpenRGB-1.0~rc3+git13.g1e1fb098/NetworkProtocol.h =================================================================== --- OpenRGB-1.0~rc3+git13.g1e1fb098.orig/NetworkProtocol.h +++ OpenRGB-1.0~rc3+git13.g1e1fb098/NetworkProtocol.h @@ -27,7 +27,7 @@ /*-----------------------------------------------------*\ | Default Interface to bind to. | \*-----------------------------------------------------*/ -#define OPENRGB_SDK_HOST "0.0.0.0" +#define OPENRGB_SDK_HOST "127.0.0.1" /*-----------------------------------------------------*\ | Default OpenRGB SDK port is 6742 | Index: OpenRGB-1.0~rc3+git13.g1e1fb098/qt/openrgb.service =================================================================== --- OpenRGB-1.0~rc3+git13.g1e1fb098.orig/qt/openrgb.service +++ OpenRGB-1.0~rc3+git13.g1e1fb098/qt/openrgb.service @@ -3,7 +3,7 @@ Description=OpenRGB SDK Server After=network.target lm_sensors.service [Service] -ExecStart=/usr/bin/openrgb --server --config /etc/openrgb +ExecStart=/usr/bin/openrgb --server --server-host 127.0.0.1 --no-autoconnect --config /etc/openrgb Restart=always RuntimeDirectory=openrgb WorkingDirectory=/run/openrgb
