Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-CairoSVG for openSUSE:Factory
checked in at 2026-10-12 22:05:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-CairoSVG (Old)
and /work/SRC/openSUSE:Factory/.python-CairoSVG.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-CairoSVG"
Mon Oct 12 22:05:17 2026 rev:18 rq:1384170 version:2.9.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-CairoSVG/python-CairoSVG.changes
2026-03-17 19:03:59.971433372 +0100
+++
/work/SRC/openSUSE:Factory/.python-CairoSVG.new.3698736/python-CairoSVG.changes
2026-10-12 22:05:33.051138312 +0200
@@ -1,0 +2,8 @@
+Mon Oct 12 07:42:55 UTC 2026 - Markéta Machová <[email protected]>
+
+- Update to 2.9.1 (CVE-2026-107378, bsc#1284832)
+ * Specially crafted SVGs with very long paths could lead to exponential
+ rendering times.
+ * Support path-like objects for the url parameter
+
+-------------------------------------------------------------------
Old:
----
CairoSVG-2.9.0.tar.xz
New:
----
CairoSVG-2.9.1.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-CairoSVG.spec ++++++
--- /var/tmp/diff_new_pack.tVG7s1/_old 2026-10-12 22:05:37.811333572 +0200
+++ /var/tmp/diff_new_pack.tVG7s1/_new 2026-10-12 22:05:37.813333655 +0200
@@ -23,7 +23,7 @@
%endif
%{?sle15_python_module_pythons}
Name: python-CairoSVG
-Version: 2.9.0
+Version: 2.9.1
Release: 0
Summary: A Python SVG converter based on Cairo
License: LGPL-3.0-or-later
++++++ CairoSVG-2.9.0.tar.xz -> CairoSVG-2.9.1.tar.xz ++++++
/work/SRC/openSUSE:Factory/python-CairoSVG/CairoSVG-2.9.0.tar.xz
/work/SRC/openSUSE:Factory/.python-CairoSVG.new.3698736/CairoSVG-2.9.1.tar.xz
differ: char 15, line 1
++++++ _service ++++++
--- /var/tmp/diff_new_pack.tVG7s1/_old 2026-10-12 22:05:37.891336854 +0200
+++ /var/tmp/diff_new_pack.tVG7s1/_new 2026-10-12 22:05:37.894336977 +0200
@@ -3,7 +3,7 @@
<param name="url">https://github.com/Kozea/CairoSVG.git</param>
<param name="scm">git</param>
<param name="submodules">enable</param>
- <param name="revision">2.9.0</param>
+ <param name="revision">2.9.1</param>
<param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@</param>
<param name="versionrewrite-pattern">(.*?)(\+git0)?$</param>
</service>
