Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package OpenRGB for openSUSE:Factory checked in at 2026-08-26 19:55:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/OpenRGB (Old) and /work/SRC/openSUSE:Factory/.OpenRGB.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "OpenRGB" Wed Aug 26 19:55:56 2026 rev:15 rq:1373795 version:1.0~rc3.1+git0.g5e81e26f Changes: -------- --- /work/SRC/openSUSE:Factory/OpenRGB/OpenRGB.changes 2026-08-25 13:19:18.080291935 +0200 +++ /work/SRC/openSUSE:Factory/.OpenRGB.new.1258/OpenRGB.changes 2026-08-26 19:55:58.176501426 +0200 @@ -1,0 +2,12 @@ +Wed Aug 26 08:30:16 UTC 2026 - Matthias Gerstner <[email protected]> + +- update to 1.0~rc3.1+git326 + * fix trivial local and remote security compromise (bsc#1269523, + CVE-2026-59682, CVE-2026-59683, CVE-2026-18794) +- drop harden-network.patch which is now contained in the upstream tarball. + The patch also had a mistake in the --no[-]autoconnect command line + switch. +- adjust _service file to use upstream release tags instead of random master + branch commits that are disguised as release tags. + +------------------------------------------------------------------- Old: ---- OpenRGB-1.0~rc3+git13.g1e1fb098.tar.gz harden-network.patch New: ---- OpenRGB-1.0~rc3.1+git0.g5e81e26f.tar.gz _servicedata ----------(Old B)---------- Old: CVE-2026-59682, CVE-2026-59683, CVE-2026-18794) - drop harden-network.patch which is now contained in the upstream tarball. The patch also had a mistake in the --no[-]autoconnect command line ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ OpenRGB.spec ++++++ --- /var/tmp/diff_new_pack.G62pbI/_old 2026-08-26 19:56:01.892632666 +0200 +++ /var/tmp/diff_new_pack.G62pbI/_new 2026-08-26 19:56:01.895632772 +0200 @@ -19,7 +19,7 @@ %global _name openrgb Name: OpenRGB -Version: 1.0~rc3+git13.g1e1fb098 +Version: 1.0~rc3.1+git0.g5e81e26f Release: 0%{?dist} Summary: Open source RGB lighting control License: GPL-2.0-or-later @@ -29,7 +29,6 @@ Source2: openrgb-udev.conf # Restrict i2c access and remove /dev/port permissions (bsc#1215130) Patch0: OpenRGB-udev-i2c-use-group.patch -Patch1: harden-network.patch # Leap 15.6 and below cannot use the default GCC7 due to std::filesystem. # Picking GCC13 as this works with position independent executables %if 0%{?suse_version} < 1600 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.G62pbI/_old 2026-08-26 19:56:02.029637504 +0200 +++ /var/tmp/diff_new_pack.G62pbI/_new 2026-08-26 19:56:02.039637857 +0200 @@ -2,10 +2,11 @@ <service mode="manual" name="tar_scm"> <param name="url">https://gitlab.com/CalcProgrammer1/OpenRGB.git</param> <param name="scm">git</param> - <param name="revision">master</param> + <param name="revision">release_candidate_1.0rc3.1</param> <param name="versionformat">@PARENT_TAG@+git@[email protected]%h</param> - <param name="versionrewrite-pattern">release_candidate_1.0rc3?(.*)</param> - <param name="versionrewrite-replacement">1.0~rc3\1</param> + <param name="versionrewrite-pattern">release_candidate_1.0rc3.1?(.*)</param> + <param name="versionrewrite-replacement">1.0~rc3.1\1</param> + <param name="changesgenerate">enable</param> <param name="package-meta">yes</param> </service> <service mode="manual" name="recompress"> ++++++ _servicedata ++++++ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.com/CalcProgrammer1/OpenRGB.git</param> <param name="changesrevision">5e81e26fcc65d3dacfb76b0a30ec0142ec7bb131</param></service></servicedata> (No newline at EOF)
