Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mkvtoolnix for openSUSE:Factory checked in at 2026-09-15 12:48:46 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mkvtoolnix (Old) and /work/SRC/openSUSE:Factory/.mkvtoolnix.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mkvtoolnix" Tue Sep 15 12:48:46 2026 rev:184 rq:1377970 version:102.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mkvtoolnix/mkvtoolnix.changes 2026-09-14 16:27:01.462241779 +0200 +++ /work/SRC/openSUSE:Factory/.mkvtoolnix.new.383539/mkvtoolnix.changes 2026-09-15 12:49:04.106553598 +0200 @@ -1,0 +2,19 @@ +Mon Sep 14 15:30:53 UTC 2026 - Luigi Baldoni <[email protected]> + +- Update to version 102.0 + Bug fixes: + * MKVToolNix GUI: executing actions, type "execute a program": + all the variables (`<MTX_…>`) will now be replaced again in + the argument list to the program to be executed. This was + broken in v100. + Security fixes (boo#1280126): + * CVE-2026-90783: avilib: fixed potential heap + overflows/invalid memory access in the ODML index handling + due to unsiged integer multiplication wrapping around + (colloquially known as "overflowing") with specifically + crafted AVI files. Affects only mkvmerge as the other tools + do not read AVIs. +- Drop fix-avilib_memory_allocation_failures.patch and + fix-avilib_heap_overflow.patch (merged upstream) + +------------------------------------------------------------------- Old: ---- fix-avilib_heap_overflow.patch fix-avilib_memory_allocation_failures.patch mkvtoolnix-101.0.tar.xz mkvtoolnix-101.0.tar.xz.sig New: ---- mkvtoolnix-102.0.tar.xz mkvtoolnix-102.0.tar.xz.sig ----------(Old B)---------- Old:- Drop fix-avilib_memory_allocation_failures.patch and fix-avilib_heap_overflow.patch (merged upstream) Old: do not read AVIs. - Drop fix-avilib_memory_allocation_failures.patch and fix-avilib_heap_overflow.patch (merged upstream) ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mkvtoolnix.spec ++++++ --- /var/tmp/diff_new_pack.CrbEue/_old 2026-09-15 12:49:05.944630222 +0200 +++ /var/tmp/diff_new_pack.CrbEue/_new 2026-09-15 12:49:05.948630389 +0200 @@ -17,7 +17,7 @@ Name: mkvtoolnix -Version: 101.0 +Version: 102.0 Release: 0 Summary: Tools to Create, Alter, and Inspect Matroska Files License: GPL-2.0-or-later @@ -27,10 +27,6 @@ Source1: https://mkvtoolnix.download/sources/mkvtoolnix-%{version}.tar.xz.sig # Sub-key ID 0x74AF00AD F2E32C85 of key ID 0x0F92290A 445B9007 is used for signing Source2: mkvtoolnix.keyring -# PATCH-FIX-UPSTREAM fix-avilib_memory_allocation_failures.patch -- boo#1280126 / CVE-2026-90783 -Patch0: fix-avilib_memory_allocation_failures.patch -# PATCH-FIX-UPSTREAM fix-avilib_heap_overflow.patch -- boo#1280126 / CVE-2026-90783 -Patch1: fix-avilib_heap_overflow.patch BuildRequires: desktop-file-utils BuildRequires: docbook-xsl-stylesheets BuildRequires: fdupes ++++++ mkvtoolnix-101.0.tar.xz -> mkvtoolnix-102.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/mkvtoolnix/mkvtoolnix-101.0.tar.xz /work/SRC/openSUSE:Factory/.mkvtoolnix.new.383539/mkvtoolnix-102.0.tar.xz differ: char 15, line 1
