Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libzip for openSUSE:Factory checked in at 2026-10-20 12:36:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libzip (Old) and /work/SRC/openSUSE:Factory/.libzip.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libzip" Tue Oct 20 12:36:33 2026 rev:52 rq:1386190 version:1.12.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libzip/libzip.changes 2025-09-11 14:37:37.259435584 +0200 +++ /work/SRC/openSUSE:Factory/.libzip.new.3698736/libzip.changes 2026-10-20 12:36:52.617891801 +0200 @@ -1,0 +2,28 @@ +Fri Oct 16 19:04:47 UTC 2026 - Andreas Stieger <[email protected]> + +- update to 1.12.1: + * Protect against denial of service attack + (GHSA-m3wq-j48p-jxwh, actually fixed in 1.12) + * Fix compile issues. + * Fix adding and replacing files in torrentzip archives + * Fix error handling in zip_source_filep_create() +- update to 1.12: + * Keep order of local extra fields, even if an identical extra + field is present in the central directory + * Add zip_source_at_eof() and ZIP_SOURCE_AT_EOF + * Consistently report CRC and decryption errors when reading + exactly to end-of-file. + * Remove Mbed TLS support - the required functions were made + private + * Securely clear passwords and key material before freeing it + * Use SipHash hash function with per-table random keys. This + prevents hash flooding attacks + * Add compile time option to limit LZMA window size + * Add more comprehensive fuzzers for metadata and write code + paths + * Fix zip_source_is_seekable() + * Fix setting incorrect WinZIP AES version in some cases + * Further improvements to overall stability and other minor + adjustments have been made + +------------------------------------------------------------------- Old: ---- libzip-1.11.4.tar.xz New: ---- libzip-1.12.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libzip.spec ++++++ --- /var/tmp/diff_new_pack.wmDMm9/_old 2026-10-20 12:36:54.000949669 +0200 +++ /var/tmp/diff_new_pack.wmDMm9/_new 2026-10-20 12:36:54.003949795 +0200 @@ -2,6 +2,7 @@ # spec file for package libzip # # Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,10 +17,9 @@ # -%{!?make_build: %global make_build make %{?_smp_mflags}} %define sover 5 Name: libzip -Version: 1.11.4 +Version: 1.12.1 Release: 0 Summary: C library for reading, creating, and modifying zip archives License: BSD-3-Clause @@ -101,8 +101,7 @@ export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:%{buildroot}%{_libdir} %ctest -%post -n libzip%{sover} -p /sbin/ldconfig -%postun -n libzip%{sover} -p /sbin/ldconfig +%ldconfig_scriptlets -n libzip%{sover} %files tools %license LICENSE @@ -119,7 +118,7 @@ %files -n libzip%{sover} %license LICENSE -%{_libdir}/libzip.so.%{sover}* +%{_libdir}/libzip.so.%{sover}{,.*} %files devel %license LICENSE ++++++ libzip-1.11.4.tar.xz -> libzip-1.12.1.tar.xz ++++++ ++++ 25597 lines of diff (skipped)
