Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package aspell for openSUSE:Factory checked in at 2026-10-14 18:34:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/aspell (Old) and /work/SRC/openSUSE:Factory/.aspell.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "aspell" Wed Oct 14 18:34:18 2026 rev:46 rq:1384641 version:0.60.8.2 Changes: -------- --- /work/SRC/openSUSE:Factory/aspell/aspell.changes 2026-10-08 15:14:07.013587110 +0200 +++ /work/SRC/openSUSE:Factory/.aspell.new.3698736/aspell.changes 2026-10-14 18:34:47.640045073 +0200 @@ -1,0 +2,7 @@ +Tue Oct 13 15:10:09 UTC 2026 - Petr Gajdos <[email protected]> + +- added patches + CVE-2026-103658: Arbitrary code execution via crafted dictionary file [bsc#1285066] + * aspell-CVE-2026-103658.patch + +------------------------------------------------------------------- New: ---- aspell-CVE-2026-103658.patch ----------(New B)---------- New: CVE-2026-103658: Arbitrary code execution via crafted dictionary file [bsc#1285066] * aspell-CVE-2026-103658.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ aspell.spec ++++++ --- /var/tmp/diff_new_pack.o6ICez/_old 2026-10-14 18:34:48.495081279 +0200 +++ /var/tmp/diff_new_pack.o6ICez/_new 2026-10-14 18:34:48.496081322 +0200 @@ -20,7 +20,7 @@ Version: 0.60.8.2 Release: 0 Summary: A Spell Checker -License: BSD-Mark-Modifications AND GFDL-1.1-or-later AND LGPL-2.1-only AND HPND +License: GFDL-1.1-or-later AND SUSE-BSD-Mark-Modifications AND LGPL-2.1-only AND HPND Group: Productivity/Text/Spell URL: http://aspell.net/ Source0: https://ftp.gnu.org/gnu/aspell/%{name}-%{version}.tar.gz @@ -35,6 +35,8 @@ Patch3: aspell-CVE-2026-75820.patch # CVE-2026-75819: out-of-bounds read in `ReadOnlyDict::load()` of `readonly_ws.cpp` can lead to heap memory disclosure or application crash [bsc#1284338] Patch4: aspell-CVE-2026-75819.patch +# CVE-2026-103658: Arbitrary code execution via crafted dictionary file [bsc#1285066] +Patch5: aspell-CVE-2026-103658.patch BuildRequires: fdupes BuildRequires: gcc-c++ BuildRequires: libtool ++++++ aspell-CVE-2026-103658.patch ++++++ >From b830b6e836aea9373fe5dd361b58e2d19d511958 Mon Sep 17 00:00:00 2001 From: Kevin Atkinson <[email protected]> Date: Sun, 20 Sep 2026 23:34:24 -0400 Subject: [PATCH] common/string.hpp: fix integer overflow in String::reserve Fixes CVE-2026-103658 found by Anthropic and validated by Ada Logics. --- common/string.hpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/common/string.hpp b/common/string.hpp index 18f67df0..ee30b45b 100644 --- a/common/string.hpp +++ b/common/string.hpp @@ -75,7 +75,7 @@ namespace acommon { public: void reserve(size_t s) { - if (storage_end_ - begin_ >= (int)s + 1) return; + if ((size_t)(storage_end_ - begin_) >= s + 1) return; reserve_i(s); }
