Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Glances for openSUSE:Factory checked in at 2026-09-02 16:59:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Glances (Old) and /work/SRC/openSUSE:Factory/.python-Glances.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Glances" Wed Sep 2 16:59:20 2026 rev:35 rq:1375156 version:4.5.6 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Glances/python-Glances.changes 2026-07-01 16:36:57.125716591 +0200 +++ /work/SRC/openSUSE:Factory/.python-Glances.new.1265/python-Glances.changes 2026-09-02 16:59:26.431463900 +0200 @@ -1,0 +2,30 @@ +Fri Aug 21 12:58:10 UTC 2026 - Nico Krapp <[email protected]> + +- Update to 4.5.6 (fixes CVE-2026-62982 (bsc#1275465), CVE-2026-68520, + CVE-2026-68519, CVE-2026-68518, CVE-2026-68517) + * Alert level decided by dict ordering: a failing+slow URL is downgraded to + WARNING, an unscanned URL reports CRITICAL #3632 + * GPU plugin duplicates card name and omits N/A for unavailable metrics in + multi-GPU #3631 + * GPU plugin duplicates the utilisation value and paints it with the memory + colour in multi-GPU #3630 + * IP plugin displays wrong interface: outer loop in get_ip_address() never + breaks #3617 + * VideoCore (v3d) memory shows ~93% on Raspberry Pi 5 with gpu_mem=4M — + misleading denominator from drm-total-memory #3611 + * CSV export: --stdout-csv data rows desync from header when network + interfaces change count at runtime #3606 + * Glances Network plugin with mismatched schema not logging in TimescaleDB + export #3592 + * as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via + /api/4/config - CVE-2026-68520 + * --disable-config-exec does not cover on-alert action commands + - CVE-2026-68519 + * Command injection bypass of action-template sanitizer via cross-field + shell-operator reconstruction - CVE-2026-68518 + * Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by + nested stat values - CVE-2026-62982 + * REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test + - CVE-2026-68517 + +------------------------------------------------------------------- @@ -82 +112 @@ -- Update to 4.5.3 (CVE-2026-33533, bsc#1261379): +- Update to 4.5.3 (CVE-2026-33533, bsc#1261379, CVE-2026-33641, bsc#1261380): @@ -417 +447 @@ -- Update to 3.2.1 +- Update to 3.2.1 (fixes CVE-2021-23418, bsc#1188925) Old: ---- glances-4.5.5.tar.gz New: ---- glances-4.5.6.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Glances.spec ++++++ --- /var/tmp/diff_new_pack.aLmbOl/_old 2026-09-02 16:59:27.432498699 +0200 +++ /var/tmp/diff_new_pack.aLmbOl/_new 2026-09-02 16:59:27.433498734 +0200 @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-Glances -Version: 4.5.5 +Version: 4.5.6 Release: 0 Summary: A cross-platform curses-based monitoring tool License: LGPL-3.0-only @@ -102,6 +102,7 @@ %check # Don't test piped output using popen donttest="test_run_sanitizes_pipe_in_mustache or test_pipe" +donttest+=" or test_run_sanitizes_cmdline_section" # Assumes network interfaces exist donttest+=" or test_glances_api_plugin_network" %pytest -k "not ($donttest)" ++++++ glances-4.5.5.tar.gz -> glances-4.5.6.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Glances/glances-4.5.5.tar.gz /work/SRC/openSUSE:Factory/.python-Glances.new.1265/glances-4.5.6.tar.gz differ: char 25, line 1
