Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libksba for openSUSE:Factory checked in at 2026-09-04 12:36:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libksba (Old) and /work/SRC/openSUSE:Factory/.libksba.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libksba" Fri Sep 4 12:36:16 2026 rev:53 rq:1375021 version:1.8.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libksba/libksba.changes 2026-05-17 18:56:33.103634498 +0200 +++ /work/SRC/openSUSE:Factory/.libksba.new.1265/libksba.changes 2026-09-04 12:36:50.489064339 +0200 @@ -1,0 +2,10 @@ +Tue Sep 1 00:19:28 UTC 2026 - Andreas Stieger <[email protected]> + +- Update to 1.8.1: + * Fix CMS parser to avoid possible infinite loop +- drop libksba-nobetasuffix.patch, not needed when autoreconf is + not run. Also don't run it. +- Fix fgrep deprecation warnings in ksba-config --libs output + boo#1203092 add libksba-1.8.1-fgrep-warning.patch, sent upstream + +------------------------------------------------------------------- Old: ---- libksba-1.8.0.tar.bz2 libksba-1.8.0.tar.bz2.sig libksba-nobetasuffix.patch New: ---- libksba-1.8.1-fgrep-warning.patch libksba-1.8.1.tar.bz2 libksba-1.8.1.tar.bz2.sig ----------(Old B)---------- Old: * Fix CMS parser to avoid possible infinite loop - drop libksba-nobetasuffix.patch, not needed when autoreconf is not run. Also don't run it. ----------(Old E)---------- ----------(New B)---------- New:- Fix fgrep deprecation warnings in ksba-config --libs output boo#1203092 add libksba-1.8.1-fgrep-warning.patch, sent upstream ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libksba.spec ++++++ --- /var/tmp/diff_new_pack.epTrp9/_old 2026-09-04 12:36:51.197089198 +0200 +++ /var/tmp/diff_new_pack.epTrp9/_new 2026-09-04 12:36:51.198089233 +0200 @@ -2,6 +2,7 @@ # spec file for package libksba # # Copyright (c) 2026 SUSE LLC and contributors +# Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +19,7 @@ %define soname 8 Name: libksba -Version: 1.8.0 +Version: 1.8.1 Release: 0 Summary: A X.509 Library License: (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later AND MIT @@ -29,11 +30,7 @@ # https://www.gnupg.org/signature_key.html Source3: %{name}.keyring Source4: libksba.changes -#PATCH-FIX-OPENSUSE Do not pull revision info from GIT when autoconf is run -Patch0: libksba-nobetasuffix.patch -BuildRequires: autoconf -BuildRequires: automake -BuildRequires: libtool +Patch0: libksba-1.8.1-fgrep-warning.patch BuildRequires: pkgconfig BuildRequires: pkgconfig(gpg-error) >= 1.28 @@ -68,13 +65,12 @@ %autosetup -p1 %build -autoreconf -vfi build_timestamp=$(date -u +%{Y}-%{m}-%{dT}%{H}:%{M}+0000 -r %{SOURCE4}) %configure \ --disable-static \ --with-pic \ - --enable-build-timestamp="${build_timestamp}" - + --enable-build-timestamp="${build_timestamp}" \ + %{nil} %make_build %check @@ -84,18 +80,17 @@ %make_install find %{buildroot} -type f -name "*.la" -delete -print -%post -n %{name}%{soname} -p /sbin/ldconfig -%postun -n %{name}%{soname} -p /sbin/ldconfig +%ldconfig_scriptlets -n %{name}%{soname} %files -n %{name}%{soname} %license COPYING* %doc README AUTHORS ChangeLog NEWS THANKS TODO -%{_libdir}/libksba*.so.* +%{_libdir}/libksba.so.%{soname}{,.*} %files devel %license COPYING* %{_bindir}/ksba-config -%{_libdir}/libksba*.so +%{_libdir}/libksba.so %{_libdir}/pkgconfig/ksba.pc %{_includedir}/ksba.h %{_datadir}/aclocal/ksba.m4 ++++++ libksba-1.8.1-fgrep-warning.patch ++++++ >From 19d5612ca192dcb132c75f1e4b04e086c06ff651 Mon Sep 17 00:00:00 2001 From: Andreas Stieger <[email protected]> Date: Tue, 1 Sep 2026 02:05:10 +0200 Subject: [PATCH] ksba-config: more portable, using grep -F over fgrep Avoids spurious warnings in ksba-config output. --- src/ksba-config.in | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ksba-config.in b/src/ksba-config.in index 76d038d..27b187b 100644 --- a/src/ksba-config.in +++ b/src/ksba-config.in @@ -126,7 +126,7 @@ if test "$echo_cflags" = "yes"; then fi tmp="" for i in $includes $cflags; do - if echo "$tmp" | fgrep -v -- "$i" >/dev/null; then + if echo "$tmp" | @FGREP@ -v -- "$i" >/dev/null; then tmp="$tmp $i" fi done @@ -140,7 +140,7 @@ if test "$echo_libs" = "yes"; then fi tmp="" for i in $libdirs $libs; do - if echo "$tmp" | fgrep -v -- "$i" >/dev/null; then + if echo "$tmp" | @FGREP@ -v -- "$i" >/dev/null; then tmp="$tmp $i" fi done -- 2.55.0 ++++++ libksba-1.8.0.tar.bz2 -> libksba-1.8.1.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/ChangeLog new/libksba-1.8.1/ChangeLog --- old/libksba-1.8.0/ChangeLog 2026-05-13 12:04:57.000000000 +0200 +++ new/libksba-1.8.1/ChangeLog 2026-08-24 14:41:39.000000000 +0200 @@ -1,3 +1,17 @@ +2026-08-24 Werner Koch <[email protected]> + + Release 1.8.1. + + commit 717381422750fb5a3e971d768ba46cae9a01682d + + +2026-07-30 NIIBE Yutaka <[email protected]> + + Fix CMS parser to avoid possible infinite loop. + + commit 06720f9b16a172404f49089cbb6eb95e4344f562 + * src/cms-parser.c (_ksba_cms_parse_signed_data_part_2): Finish + when detecting no progress. + (_ksba_cms_parse_enveloped_data_part_1): Likewise. + 2026-05-13 Werner Koch <[email protected]> Release 1.8.0. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/NEWS new/libksba-1.8.1/NEWS --- old/libksba-1.8.0/NEWS 2026-05-13 12:02:20.000000000 +0200 +++ new/libksba-1.8.1/NEWS 2026-08-24 14:26:34.000000000 +0200 @@ -1,3 +1,11 @@ +Noteworthy changes in version 1.8.1 (2026-08-24) [C24/A16/R1] +------------------------------------------------ + + * Fix CMS parser to avoid possible infinite loop. [T8361] + + Release-info: https://dev.gnupg.org/T8253 + + Noteworthy changes in version 1.8.0 (2026-05-13) [C24/A16/R0] ------------------------------------------------ @@ -6,6 +14,11 @@ * Support building of unsigned attributes with ksba_cms_add_attribute. [rK54d7e3bea8] + * Interface changes relative to the 1.7.0 release: + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + ksba_cms_get_attribute NEW. + + Release-info: https://dev.gnupg.org/T8253 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/configure new/libksba-1.8.1/configure --- old/libksba-1.8.0/configure 2026-05-13 12:04:51.000000000 +0200 +++ new/libksba-1.8.1/configure 2026-08-24 14:41:33.000000000 +0200 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.71 for libksba 1.8.0. +# Generated by GNU Autoconf 2.71 for libksba 1.8.1. # # Report bugs to <https://bugs.gnupg.org>. # @@ -621,8 +621,8 @@ # Identity of this package. PACKAGE_NAME='libksba' PACKAGE_TARNAME='libksba' -PACKAGE_VERSION='1.8.0' -PACKAGE_STRING='libksba 1.8.0' +PACKAGE_VERSION='1.8.1' +PACKAGE_STRING='libksba 1.8.1' PACKAGE_BUGREPORT='https://bugs.gnupg.org' PACKAGE_URL='' @@ -1408,7 +1408,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures libksba 1.8.0 to adapt to many kinds of systems. +\`configure' configures libksba 1.8.1 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1479,7 +1479,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of libksba 1.8.0:";; + short | recursive ) echo "Configuration of libksba 1.8.1:";; esac cat <<\_ACEOF @@ -1616,7 +1616,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -libksba configure 1.8.0 +libksba configure 1.8.1 generated by GNU Autoconf 2.71 Copyright (C) 2021 Free Software Foundation, Inc. @@ -2161,7 +2161,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by libksba $as_me 1.8.0, which was +It was created by libksba $as_me 1.8.1, which was generated by GNU Autoconf 2.71. Invocation command line was $ $0$ac_configure_args_raw @@ -2926,7 +2926,7 @@ # Please remember to document interface changes in the NEWS file. LIBKSBA_LT_CURRENT=24 LIBKSBA_LT_AGE=16 -LIBKSBA_LT_REVISION=0 +LIBKSBA_LT_REVISION=1 #------------------- # If the API is changed in an incompatible way: increment the next counter. KSBA_CONFIG_API_VERSION=1 @@ -3451,7 +3451,7 @@ # Define the identity of the package. PACKAGE='libksba' - VERSION='1.8.0' + VERSION='1.8.1' printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h @@ -13778,7 +13778,7 @@ -VERSION_NUMBER=0x010800 +VERSION_NUMBER=0x010801 @@ -16548,11 +16548,11 @@ # Generate extended version information for W32. if test "$have_w32_system" = yes; then BUILD_FILEVERSION=`echo "$VERSION" | sed 's/\([0-9.]*\).*/\1./;s/\./,/g'` - BUILD_FILEVERSION="${BUILD_FILEVERSION}18284" + BUILD_FILEVERSION="${BUILD_FILEVERSION}29043" fi -BUILD_REVISION="476c602" +BUILD_REVISION="7173814" printf "%s\n" "#define BUILD_REVISION \"$BUILD_REVISION\"" >>confdefs.h @@ -17148,7 +17148,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by libksba $as_me 1.8.0, which was +This file was extended by libksba $as_me 1.8.1, which was generated by GNU Autoconf 2.71. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -17216,7 +17216,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ -libksba config.status 1.8.0 +libksba config.status 1.8.1 configured by $0, generated by GNU Autoconf 2.71, with options \\"\$ac_cs_config\\" @@ -19172,7 +19172,7 @@ echo " Libksba v${VERSION} has been configured as follows: - Revision: 476c602 (18284) + Revision: 7173814 (29043) Platform: $host " diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/configure.ac new/libksba-1.8.1/configure.ac --- old/libksba-1.8.0/configure.ac 2026-05-13 12:02:07.000000000 +0200 +++ new/libksba-1.8.1/configure.ac 2026-08-24 14:26:44.000000000 +0200 @@ -30,7 +30,7 @@ m4_define([mym4_package],[libksba]) m4_define([mym4_major], [1]) m4_define([mym4_minor], [8]) -m4_define([mym4_micro], [0]) +m4_define([mym4_micro], [1]) # Below is m4 magic to extract and compute the git revision number, # the decimalized short revision number, a beta version string and a @@ -52,7 +52,7 @@ # Please remember to document interface changes in the NEWS file. LIBKSBA_LT_CURRENT=24 LIBKSBA_LT_AGE=16 -LIBKSBA_LT_REVISION=0 +LIBKSBA_LT_REVISION=1 #------------------- # If the API is changed in an incompatible way: increment the next counter. KSBA_CONFIG_API_VERSION=1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/doc/ksba.info new/libksba-1.8.1/doc/ksba.info --- old/libksba-1.8.0/doc/ksba.info 2026-05-12 14:52:28.000000000 +0200 +++ new/libksba-1.8.1/doc/ksba.info 2026-08-24 14:40:20.000000000 +0200 @@ -8,8 +8,8 @@ This file documents the KSBA library to access X.509 and CMS data structures. - This is edition 1.8.0, last updated 22 November 2023, of 'The KSBA -Reference Manual', for Version 1.8.0. + This is edition 1.8.1, last updated 22 November 2023, of 'The KSBA +Reference Manual', for Version 1.8.1. Copyright (C) 2002, 2003, 2004 g10 Code GmbH @@ -25,8 +25,8 @@ Main Menu ********* -This is edition 1.8.0, last updated 22 November 2023, of 'The KSBA -Reference Manual', for Version 1.8.0 of the KSBA library. +This is edition 1.8.1, last updated 22 November 2023, of 'The KSBA +Reference Manual', for Version 1.8.1 of the KSBA library. Copyright (C) 2002, 2003, 2004 g10 Code GmbH diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/doc/stamp-vti new/libksba-1.8.1/doc/stamp-vti --- old/libksba-1.8.0/doc/stamp-vti 2026-05-13 12:04:57.000000000 +0200 +++ new/libksba-1.8.1/doc/stamp-vti 2026-08-24 14:41:39.000000000 +0200 @@ -1,4 +1,4 @@ @set UPDATED 22 November 2023 @set UPDATED-MONTH November 2023 -@set EDITION 1.8.0 -@set VERSION 1.8.0 +@set EDITION 1.8.1 +@set VERSION 1.8.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/doc/version.texi new/libksba-1.8.1/doc/version.texi --- old/libksba-1.8.0/doc/version.texi 2026-05-12 14:28:10.000000000 +0200 +++ new/libksba-1.8.1/doc/version.texi 2026-08-24 14:40:20.000000000 +0200 @@ -1,4 +1,4 @@ @set UPDATED 22 November 2023 @set UPDATED-MONTH November 2023 -@set EDITION 1.8.0 -@set VERSION 1.8.0 +@set EDITION 1.8.1 +@set VERSION 1.8.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/src/cms-parser.c new/libksba-1.8.1/src/cms-parser.c --- old/libksba-1.8.0/src/cms-parser.c 2026-05-03 15:32:57.000000000 +0200 +++ new/libksba-1.8.1/src/cms-parser.c 2026-08-24 14:23:17.000000000 +0200 @@ -779,14 +779,21 @@ return err; } - *si_tail = si; - si_tail = &si->next; - off2 = ksba_reader_tell (cms->reader); - if ( (off2 - off1) > ti.length ) + if (off2 == off1) + { + _ksba_asn_release_nodes (si->root); + xfree (si->image); + xfree (si); + break; + } + else if ( (off2 - off1) > ti.length ) ti.length = 0; else ti.length -= off2 - off1; + + *si_tail = si; + si_tail = &si->next; } return 0; @@ -945,14 +952,21 @@ return err; } - *vtend = vt; - vtend = &vt->next; - off2 = ksba_reader_tell (cms->reader); - if ( (off2 - off1) > ti.length ) + if (off2 == off1) + { + _ksba_asn_release_nodes (vt->root); + xfree (vt->image); + xfree (vt); + break; + } + else if ( (off2 - off1) > ti.length ) ti.length = 0; else ti.length -= off2 - off1; + + *vtend = vt; + vtend = &vt->next; } } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libksba-1.8.0/src/ksba.h new/libksba-1.8.1/src/ksba.h --- old/libksba-1.8.0/src/ksba.h 2026-05-13 12:04:56.000000000 +0200 +++ new/libksba-1.8.1/src/ksba.h 2026-08-24 14:41:37.000000000 +0200 @@ -45,11 +45,11 @@ /* The version of this header should match the one of the library. Do * not use this symbol in your application; use assuan_check_version * instead. */ -#define KSBA_VERSION "1.8.0" +#define KSBA_VERSION "1.8.1" /* The version number of this header. It may be used to handle minor * API incompatibilities. */ -#define KSBA_VERSION_NUMBER 0x010800 +#define KSBA_VERSION_NUMBER 0x010801
