Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libsmpp34 for openSUSE:Factory checked in at 2026-10-05 12:55:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libsmpp34 (Old) and /work/SRC/openSUSE:Factory/.libsmpp34.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libsmpp34" Mon Oct 5 12:55:08 2026 rev:11 rq:1382278 version:1.14.6 Changes: -------- --- /work/SRC/openSUSE:Factory/libsmpp34/libsmpp34.changes 2026-02-05 18:06:40.495400238 +0100 +++ /work/SRC/openSUSE:Factory/.libsmpp34.new.3698736/libsmpp34.changes 2026-10-05 12:56:46.729636815 +0200 @@ -1,0 +2,6 @@ +Sat Oct 3 21:19:49 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 1.14.6 + * The C_OCTET scan in smpp34_unpack is now bounded with strnlen() + +------------------------------------------------------------------- Old: ---- 1.14.5.tar.gz New: ---- 1.14.6.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libsmpp34.spec ++++++ --- /var/tmp/diff_new_pack.C2Q7vU/_old 2026-10-05 12:56:48.273701582 +0200 +++ /var/tmp/diff_new_pack.C2Q7vU/_new 2026-10-05 12:56:48.276701708 +0200 @@ -19,7 +19,7 @@ %define sover 1 Name: libsmpp34 -Version: 1.14.5 +Version: 1.14.6 Release: 0 Summary: PDU SMPP packaging and unpackaging tool License: GPL-2.0-or-later AND LGPL-2.1-or-later ++++++ 1.14.5.tar.gz -> 1.14.6.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsmpp34-1.14.5/debian/changelog new/libsmpp34-1.14.6/debian/changelog --- old/libsmpp34-1.14.5/debian/changelog 2025-12-03 18:42:17.000000000 +0100 +++ new/libsmpp34-1.14.6/debian/changelog 2026-08-20 10:11:38.000000000 +0200 @@ -1,3 +1,10 @@ +libsmpp34 (1.14.6) unstable; urgency=medium + + [ n0k0 ] + * smpp34_unpack: bound C_OCTET scan with strnlen() + + -- Pau Espin Pedrol <[email protected]> Thu, 20 Aug 2026 10:11:37 +0200 + libsmpp34 (1.14.5) unstable; urgency=medium [ Vadim Yanitskiy ] diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsmpp34-1.14.5/src/Makefile.am new/libsmpp34-1.14.6/src/Makefile.am --- old/libsmpp34-1.14.5/src/Makefile.am 2025-12-03 18:42:17.000000000 +0100 +++ new/libsmpp34-1.14.6/src/Makefile.am 2026-08-20 10:11:38.000000000 +0200 @@ -1,6 +1,6 @@ # This is _NOT_ the library release version, it's an API version. # Please read Chapter 6 "Library interface versions" of the libtool documentation before making any modification -LIBVERSION=3:1:2 +LIBVERSION=3:2:2 # src/Makefile.am # lib_LTLIBRARIES = libsmpp34.la diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libsmpp34-1.14.5/src/smpp34_unpack.c new/libsmpp34-1.14.6/src/smpp34_unpack.c --- old/libsmpp34-1.14.5/src/smpp34_unpack.c 2025-12-03 18:42:17.000000000 +0100 +++ new/libsmpp34-1.14.6/src/smpp34_unpack.c 2026-08-20 10:11:38.000000000 +0200 @@ -127,7 +127,7 @@ #define C_OCTET( inst, par, size ){\ - lenval = strlen( (char*) aux ) + 1;\ + lenval = strnlen((char *)aux, left) + 1;\ if( lenval > left ){\ PUTLOG("[len(%s):%d(%s)]", par, lenval, \ "Value length exceed buffer length");\ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.C2Q7vU/_old 2026-10-05 12:56:48.560713621 +0200 +++ /var/tmp/diff_new_pack.C2Q7vU/_new 2026-10-05 12:56:48.565713831 +0200 @@ -1,5 +1,5 @@ -mtime: 1770290166 -commit: 8c2bc634a4209b1ea21aba62824cdbe06a921dfa06568a4dca27e811eab5b0c7 +mtime: 1791062461 +commit: 63e1e620c4ccd7eaf3e466837b607a929de78857038a083951b2a4c2eb157e8d url: https://src.opensuse.org/jengelh/libsmpp34 revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-03 23:21:01.000000000 +0200 @@ -0,0 +1 @@ +.osc
