Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package multipath-tools for openSUSE:Factory
checked in at 2026-08-29 17:40:26
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/multipath-tools (Old)
and /work/SRC/openSUSE:Factory/.multipath-tools.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "multipath-tools"
Sat Aug 29 17:40:26 2026 rev:182 rq:1374432 version:0.15.1+227+suse.6644513
Changes:
--------
--- /work/SRC/openSUSE:Factory/multipath-tools/multipath-tools.changes
2026-07-26 11:29:36.549041603 +0200
+++
/work/SRC/openSUSE:Factory/.multipath-tools.new.1265/multipath-tools.changes
2026-08-29 17:41:22.354951953 +0200
@@ -1,0 +2,29 @@
+Fri Aug 28 11:00:28 UTC 2026 - Martin Wilck <[email protected]>
+
+- Update to version 0.15.1+227+suse.6644513 (see NEWS.md for details)
+
+ * The `preferredip=`parameter for the `iet` prioritizer has been generalized.
+ See multipath.conf(5) for details.
+
+- Upstream fixes for vulnerabilities:
+ * DoS on mulipathd socket by blocking IPC send operations
+ (GHSA-hmcm-9cq4-r2xm bsc#1277199)
+ * DoS on multipathd socket by exhausting connections
+ (GHSA-pvp6-c9p3-25fp bsc#1277203)
+ * Heap Out-of-Bounds Read in Custom Format String Parser via Trailing `%`
+ (GHSA-g5mh-253r-jjw5 bsc#1277205)
+ * Heap out-of-bounds read in device-mapper-multipath ALUA RTPG parsing
+ (GHSA-pxwh-g75c-95pc 1277208)
+ * kpartx: Heap Out-of-Bounds Read in GPT Header Validation
+ (GHSA-p6rh-9x9j-3hvx, bsc#1277209)
+ * Path traversal in device-mapper-multipath failed_wwids management
+ (GHSA-gr7q-prfc-q636 bsc#1277210)
+ * libmpathpersist PRIN READ FULL STATUS parser — unbounded descriptor
rewrite causes root heap overflow
+ (GHSA-hj7j-qr9h-5fv6 bsc#1277212)
+
+- Bug fixes:
+
+ * Fix use-after free error during shutdown (gh#opensvc/multipath-tools#152)
+ * Add missing NULL check in DM parser (gh#opensvc/multipath-tools#155)
+
+-------------------------------------------------------------------
Old:
----
multipath-tools-0.15~1+230+suse.d36a6a70.tar.xz
New:
----
multipath-tools-0.15.1+227+suse.6644513.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ multipath-tools.spec ++++++
--- /var/tmp/diff_new_pack.q8KCX6/_old 2026-08-29 17:41:23.365987629 +0200
+++ /var/tmp/diff_new_pack.q8KCX6/_new 2026-08-29 17:41:23.367987699 +0200
@@ -35,7 +35,7 @@
%define libdmmp_version %(echo %{_libdmmp_version} | tr . _)
Name: multipath-tools
-Version: 0.15~1+230+suse.d36a6a70
+Version: 0.15.1+227+suse.6644513
Release: 0
Summary: Tools to Manage Multipathed Devices with the device-mapper
License: GPL-2.0-only AND GPL-3.0-or-later
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.q8KCX6/_old 2026-08-29 17:41:23.397988758 +0200
+++ /var/tmp/diff_new_pack.q8KCX6/_new 2026-08-29 17:41:23.406989075 +0200
@@ -1,5 +1,5 @@
-mtime: 1784795654
-commit: 912759f16146889fc9a5443ce20a1e053f32b2fd28cddde6ee95e8c29076fc0a
+mtime: 1787915431
+commit: 015edd319a38163cf0e6c9eed73a3a77ba00f474068d41ae29ca36d7e3799470
url: https://src.opensuse.org/mwilck/multipath-tools
revision: factory
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.q8KCX6/_old 2026-08-29 17:41:23.437990169 +0200
+++ /var/tmp/diff_new_pack.q8KCX6/_new 2026-08-29 17:41:23.440990275 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/openSUSE/multipath-tools.git</param>
- <param
name="changesrevision">d36a6a70ea544d475744351b1864e0b36b37d4f0</param></service></servicedata>
+ <param
name="changesrevision">6644513f1bbe611cdeefacb55585064b406daf81</param></service></servicedata>
(No newline at EOF)
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-08-28 13:10:31.000000000 +0200
@@ -0,0 +1,5 @@
+.osc
+\#*
+*~
+*.obscpio
+/multipath-tools/
++++++ multipath-tools-0.15~1+230+suse.d36a6a70.tar.xz ->
multipath-tools-0.15.1+227+suse.6644513.tar.xz ++++++
++++ 1667 lines of diff (skipped)
