Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package monero for openSUSE:Factory checked in at 2026-10-05 16:19:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/monero (Old) and /work/SRC/openSUSE:Factory/.monero.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "monero" Mon Oct 5 16:19:02 2026 rev:3 rq:1382551 version:0.18.5.3 Changes: -------- --- /work/SRC/openSUSE:Factory/monero/monero.changes 2026-07-08 17:41:43.088302776 +0200 +++ /work/SRC/openSUSE:Factory/.monero.new.3698736/monero.changes 2026-10-05 16:19:20.321057987 +0200 @@ -1,0 +2,40 @@ +Mon Oct 5 07:55:27 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.18.5.3: + * Harden restricted-mode RPC/ZMQ further: hide ZMQ request + contents, redact txpool age, filter sensitive transactions out + of block templates, reject deep block submissions, restrict + get_public_nodes to public zone peers, and stop serving + get_transaction_pool in restricted mode + * Validate more untrusted input: HTTP header and JSON parser log + injection, RingCT prunable JSON types, cryptonote + serialization, pruned transaction blobs, trezor bridge and + get_outs responses, public node addresses, reserve proof key + image domains and cached transfer indices + * Reject transaction file signing with hardware wallets + * Fix an infinite loop in wallet2 size and weight estimation that + a single wallet-rpc call with a very large output count could + trigger; oversized ZMQ requests no longer kill the RPC server + * Limit the blockchain offsets cache size and detect half-closed + sockets before reusing idle connections + * Wallet fixes: fast_refresh now works on old accounts via the + nearest lower checkpoint, multisig import state survives failed + refreshes, stale transfer maps are trimmed after output + imports, received amount breakdowns stay consistent and + inconsistent transaction pubkey handling is fixed + * wallet RPC: refresh immediately with auto_refresh, stop + refreshing on shutdown, abort in-flight daemon requests on + shutdown and reject --password together with --wallet-dir + * Fix several p2p stalls and data races, re-relay transactions + lost when a node shut down before relaying them, and reject + duplicate transaction hashes and blocks known to be invalid + * Fix an implicitly defined TryAcquireSRWLockShared that caused + undefined behaviour on Windows and wrong ARMv8 slow-hash inline + assembly constraints; wrap __cxa_throw on GNU/Linux for correct + stack traces + * epee: avoid bad_weak_ptr during connection teardown and build + with OpenSSL 4.0 + * Update the RandomX proof-of-work implementation to v1.2.3 + * This entry is abridged from the upstream commit range + +------------------------------------------------------------------- Old: ---- monero-0.18.5.1.tar.gz New: ---- monero-0.18.5.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ monero.spec ++++++ --- /var/tmp/diff_new_pack.Tbr8y0/_old 2026-10-05 16:19:22.487148366 +0200 +++ /var/tmp/diff_new_pack.Tbr8y0/_new 2026-10-05 16:19:22.496148741 +0200 @@ -36,7 +36,7 @@ %define description_text_3 Security: Using the power of a distributed peer-to-peer consensus network, every transaction on the network is cryptographically secured. Individual wallets have a 24 word mnemonic seed that is only displayed once, and can be written down to backup the wallet. Wallet files are encrypted with a passphrase to ensure they are useless if stolen. %define description_text_4 Untraceability: By taking advantage of ring signatures, a special property of a certain type of cryptography, Monero is able to ensure that transactions are not only untraceable, but have an optional measure of ambiguity that ensures that transactions cannot easily be tied back to an individual user or computer. Name: monero -Version: 0.18.5.1 +Version: 0.18.5.3 Release: 0 Summary: P2P digital currency License: MIT ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Tbr8y0/_old 2026-10-05 16:19:22.630154333 +0200 +++ /var/tmp/diff_new_pack.Tbr8y0/_new 2026-10-05 16:19:22.640154750 +0200 @@ -1,11 +1,11 @@ <services> <service name="obs_scm" mode="manual"> - <param name="versionformat">0.18.5.1</param> + <param name="versionformat">0.18.5.3</param> <param name="url">https://github.com/monero-project/monero.git</param> <param name="scm">git</param> <param name="changesgenerate">enable</param> <param name="exclude">.*</param> - <param name="revision">refs/tags/v0.18.5.1</param> + <param name="revision">refs/tags/v0.18.5.3</param> </service> <service name="tar" mode="manual"> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Tbr8y0/_old 2026-10-05 16:19:22.711157712 +0200 +++ /var/tmp/diff_new_pack.Tbr8y0/_new 2026-10-05 16:19:22.726158338 +0200 @@ -1,7 +1,7 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/monero-project/monero.git</param> - <param name="changesrevision">4f92268d7c16741cfb41e5bbe2aa46cc260a9ea5</param> + <param name="changesrevision">22578c3f7d7b4b6dd85ff7daa42a827d97cc53d0</param> </service> </servicedata> (No newline at EOF) ++++++ monero-0.18.5.1.tar.gz -> monero-0.18.5.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/monero/monero-0.18.5.1.tar.gz /work/SRC/openSUSE:Factory/.monero.new.3698736/monero-0.18.5.3.tar.gz differ: char 12, line 1 ++++++ monero.obsinfo ++++++ --- /var/tmp/diff_new_pack.Tbr8y0/_old 2026-10-05 16:19:22.870164347 +0200 +++ /var/tmp/diff_new_pack.Tbr8y0/_new 2026-10-05 16:19:22.878164680 +0200 @@ -1,5 +1,5 @@ name: monero -version: 0.18.5.1 -mtime: 1782813826 -commit: 4f92268d7c16741cfb41e5bbe2aa46cc260a9ea5 +version: 0.18.5.3 +mtime: 1790970417 +commit: 22578c3f7d7b4b6dd85ff7daa42a827d97cc53d0
