Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gsoap for openSUSE:Factory checked in at 2026-10-23 20:21:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gsoap (Old) and /work/SRC/openSUSE:Factory/.gsoap.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gsoap" Fri Oct 23 20:21:24 2026 rev:93 rq:1386985 version:2.8.145 Changes: -------- --- /work/SRC/openSUSE:Factory/gsoap/gsoap.changes 2026-07-29 18:58:59.377108051 +0200 +++ /work/SRC/openSUSE:Factory/.gsoap.new.2252680/gsoap.changes 2026-10-23 20:21:44.155097081 +0200 @@ -1,0 +2,14 @@ +Wed Oct 21 20:18:08 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 2.8.145 + * Reject RFC 4051 truncated-HMAC values specified in + `HMACOutputLength`. + * Constrain the use of weak and vulnerable HMAC-SHA1 in + WS-Security (gSOAP WS-Security documentation has always warned + against using HMAC with secret shared keys). + * Further constrain (deprecated) DIME protocol attachment + processing limits, which are already constrained by + `SOAP_MAXDIMESIZE` (8MB default) and by the run-time + `recv_maxlength` limit on XML+attachment size. + +------------------------------------------------------------------- Old: ---- gsoap-2.8.144.tar.xz New: ---- gsoap-2.8.145.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gsoap.spec ++++++ --- /var/tmp/diff_new_pack.6Nukjk/_old 2026-10-23 20:21:45.119137424 +0200 +++ /var/tmp/diff_new_pack.6Nukjk/_new 2026-10-23 20:21:45.120137466 +0200 @@ -17,8 +17,8 @@ Name: gsoap -%define lname libgsoap-2_8_144 -Version: 2.8.144 +%define lname libgsoap-2_8_145 +Version: 2.8.145 Release: 0 Summary: Toolkit for SOAP/REST-based C/C++ server and client web service applications License: SUSE-GPL-2.0+-with-openssl-exception ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.6Nukjk/_old 2026-10-23 20:21:45.158139056 +0200 +++ /var/tmp/diff_new_pack.6Nukjk/_new 2026-10-23 20:21:45.160139140 +0200 @@ -1,5 +1,5 @@ -mtime: 1785147591 -commit: 5adbf68e5e9c0a5a5fc16b5a00411c585013df6139ec40bb2327c1337f9f94ec +mtime: 1792614020 +commit: 4ba51b4a272e30f478648c875e3382057bfad7f743a6a23ab5b2cdce1f590c39 url: https://src.opensuse.org/jengelh/gsoap revision: master ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sanitize_source.sh new/sanitize_source.sh --- old/sanitize_source.sh 2026-07-27 12:19:51.000000000 +0200 +++ new/sanitize_source.sh 2026-10-21 22:20:20.000000000 +0200 @@ -13,7 +13,7 @@ exit 1; fi; -version="2.8.144" +version="2.8.145" shortver="2.8" # agh... if [ ! -e "gsoap_$version.zip" ]; then wget -c "https://downloads.sf.net/gsoap2/gsoap_$version.zip"; ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-21 22:20:20.000000000 +0200 @@ -0,0 +1 @@ +.osc diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sanitize_source.sh new/sanitize_source.sh --- old/sanitize_source.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/sanitize_source.sh 2026-10-21 22:20:20.000000000 +0200 @@ -0,0 +1,45 @@ +#!/bin/sh -ex +# +# Shrink the gsoap archive from 32 MB -> 17 MB and removes .exe/.dll files. +# +# Requires: fdupes, hardlink + +if ! which fdupes >/dev/null; then + echo "fdupes not installed."; + exit 1; +fi; +if ! which hardlink >/dev/null; then + echo "The \"hardlink\" utility (package: hardlink) is not installed."; + exit 1; +fi; + +version="2.8.145" +shortver="2.8" # agh... +if [ ! -e "gsoap_$version.zip" ]; then + wget -c "https://downloads.sf.net/gsoap2/gsoap_$version.zip"; +fi + +rm -Rf "gsoap-$shortver" "gsoap-$version" +unzip -q "gsoap_$version.zip" + +# Someone failed at sane version number tagging. +mv "gsoap-$shortver" "gsoap-$version" + +# Remove executables, backups, cache files, non-Linux parts... +rm -Rf "gsoap-$version/gsoap/bin" \ + "gsoap-$version/samples/link++/xmas" \ + "gsoap-$version"/*.old \ + "gsoap-$version/autom4te.cache" +find "gsoap-$version" -type d -name "*.pbxindex" -exec rm -Rf "{}" "+" +rm -Rf "gsoap-$version/gsoap/ios_plugin" +find "gsoap-$version" -type f "(" \ + -iname "*.exe" -o -iname "*.dll" -o -name "*.o" -o \ + -name "*~" -o -name .DS_Store ")" -delete + +# And while we are at it, the VS files won't be needed anyway +rm -Rf "gsoap-$version/gsoap/VisualStudio2005" + +hardlink "gsoap-$version" +find "gsoap-$version" -print0 | sort -z | \ + tar --no-recur --null -T- --owner=root --group=root --use=xz \ + -cf "gsoap-$version.tar.xz" ++++++ gsoap-2.8.144.tar.xz -> gsoap-2.8.145.tar.xz ++++++ /work/SRC/openSUSE:Factory/gsoap/gsoap-2.8.144.tar.xz /work/SRC/openSUSE:Factory/.gsoap.new.2252680/gsoap-2.8.145.tar.xz differ: char 15, line 1 ++++++ sanitize_source.sh ++++++ --- /var/tmp/diff_new_pack.6Nukjk/_old 2026-10-23 20:21:45.342146756 +0200 +++ /var/tmp/diff_new_pack.6Nukjk/_new 2026-10-23 20:21:45.347146965 +0200 @@ -13,7 +13,7 @@ exit 1; fi; -version="2.8.144" +version="2.8.145" shortver="2.8" # agh... if [ ! -e "gsoap_$version.zip" ]; then wget -c "https://downloads.sf.net/gsoap2/gsoap_$version.zip";
