Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dr_libs for openSUSE:Factory checked in at 2026-10-18 19:24:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dr_libs (Old) and /work/SRC/openSUSE:Factory/.dr_libs.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dr_libs" Sun Oct 18 19:24:51 2026 rev:5 rq:1385714 version:20260901 Changes: -------- --- /work/SRC/openSUSE:Factory/dr_libs/dr_libs.changes 2026-03-17 19:08:02.045461091 +0100 +++ /work/SRC/openSUSE:Factory/.dr_libs.new.3698736/dr_libs.changes 2026-10-18 19:25:06.040228000 +0200 @@ -1,0 +2,13 @@ +Sat Oct 17 17:05:54 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 20260901: + * Harden dr_wav, dr_flac and dr_mp3 against malformed files: + bounds checks for metadata, chunk and tag parsing. + * Fix uncontrolled memory allocation when parsing FLAC PICTURE + metadata (boo#1259811, CVE-2026-32836). + * Fix heap buffer overflow when parsing WAV files with a malformed + "smpl" chunk (boo#1259174, CVE-2026-29022). + * dr_flac 0.13.4, dr_mp3 0.7.4, dr_wav 0.14.6. + * Rebase fix-headers.patch against the restructured tests. + +------------------------------------------------------------------- Old: ---- dr_libs-20260315.tar.gz New: ---- dr_libs-20260901.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dr_libs.spec ++++++ --- /var/tmp/diff_new_pack.UUSt8J/_old 2026-10-18 19:25:06.815260243 +0200 +++ /var/tmp/diff_new_pack.UUSt8J/_new 2026-10-18 19:25:06.816260284 +0200 @@ -16,11 +16,11 @@ # -%define flacversion 0.13.3 -%define mp3version 0.7.3 -%define wavversion 0.14.5 +%define flacversion 0.13.4 +%define mp3version 0.7.4 +%define wavversion 0.14.6 Name: dr_libs -Version: 20260315 +Version: 20260901 Release: 0 Summary: Audio decoding libraries for C/C++, each in a single source file License: MIT-0 OR Unlicense @@ -30,6 +30,7 @@ BuildRequires: c++_compiler BuildRequires: cmake BuildRequires: miniaudio-devel +BuildRequires: pkgconfig BuildRequires: pkgconfig(flac) BuildRequires: pkgconfig(sndfile) @@ -38,10 +39,10 @@ %package devel Summary: Development files for %{name} -BuildArch: noarch Provides: dr_flac = %{flacversion} Provides: dr_mp3 = %{mp3version} Provides: dr_wav = %{wavversion} +BuildArch: noarch %description devel %{summary}. ++++++ dr_libs-20260315.tar.gz -> dr_libs-20260901.tar.gz ++++++ ++++ 2016 lines of diff (skipped) ++++++ fix-headers.patch ++++++ --- /var/tmp/diff_new_pack.UUSt8J/_old 2026-10-18 19:25:07.196276094 +0200 +++ /var/tmp/diff_new_pack.UUSt8J/_new 2026-10-18 19:25:07.200276260 +0200 @@ -6,7 +6,7 @@ #define MA_NO_DECODING #define MA_NO_ENCODING #define MA_IMPLEMENTATION --#include "../../../miniaudio/miniaudio.h" +-#include "../external/miniaudio/miniaudio.h" +#include <miniaudio/miniaudio.h> #define DR_WAV_IMPLEMENTATION
