Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openscap for openSUSE:Factory checked in at 2026-10-23 20:29:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openscap (Old) and /work/SRC/openSUSE:Factory/.openscap.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openscap" Fri Oct 23 20:29:21 2026 rev:91 rq:1388021 version:1.4.6 Changes: -------- --- /work/SRC/openSUSE:Factory/openscap/openscap.changes 2026-05-29 18:10:51.971790045 +0200 +++ /work/SRC/openSUSE:Factory/.openscap.new.2252680/openscap.changes 2026-10-23 20:30:30.833157258 +0200 @@ -1,0 +2,43 @@ +Fri Oct 23 06:53:04 UTC 2026 - Alexander Bergmann <[email protected]> + +- update to 1.4.6: + * Vulnerability fix + - CVE-2026-85518: Fix path traversal when dumping SDS components (bsc#1286889) + * Maintenance, bug fix + - Lock test_file for all_python.sh + - Serialize the filehash DoS tests + - Free the TestResult of an evaluation that names an unknown rule + - Evaluate OVAL state with no entities as true + - Ship oscap-run-sce-script with the SCE engine + +------------------------------------------------------------------- +Tue Oct 13 13:26:31 UTC 2026 - Alexander Bergmann <[email protected]> + +- update to 1.4.5: + * New features + - Add yescrypt support to encrypt_method in shadow probe + - autotailor: Add validation for variable names, rule IDs, and profile IDs + * Maintenance, bug fix + - Ensure that there is only one customizations in blueprint remedations + - Add test ensuring $TMPDIR is honored by OpenSCAP + - Add missing fix systems to guides + - Fix groff warning for nested "tagged paragraph" + - Prevent denial of service in filehash and filehash58 probes + - Fix TOCTOU race condition in file content probes + - Do not use gcrypt cmake variables if gcrypt is not found + - Replace removed Python 2 C API macros for SWIG 4.5.0 compatibility + - Fix build without crypto support + - Fix autotailor overwriting extends attribute from JSON tailoring + - Gracefully provide an error if JSON tailoring doesn't exist + - textfilecontent54 probe: fix memory leaks in process_file + - fix: account for DST in XCCDF result timestamp offset + - OVAL/XCCDF/DS/source: fix memory-corruption bugs on malformed input + - CPE/XCCDF/DS: fix infinite loops in parsers on malformed input + - Sanitize strings to prevent UTF errors + - Update the Ubuntu/Debian dev install command + - Generate raw partitioning mode in Image Builder blueprints + - XCCDF: replace ctime with ctime_r in status dump + - Skip verifying RPM signatures in tests + - Fix critical safety and correctness issues in release.sh + +------------------------------------------------------------------- Old: ---- openscap-1.4.4.tar.gz openscap-1.4.4.tar.gz.sha512 New: ---- openscap-1.4.6.tar.gz openscap-1.4.6.tar.gz.sha512 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openscap.spec ++++++ --- /var/tmp/diff_new_pack.MQt2xU/_old 2026-10-23 20:30:32.436224529 +0200 +++ /var/tmp/diff_new_pack.MQt2xU/_new 2026-10-23 20:30:32.438224612 +0200 @@ -23,7 +23,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: openscap -Version: 1.4.4 +Version: 1.4.6 Release: 0 Summary: A Set of Libraries for Integration with SCAP License: LGPL-2.1-or-later ++++++ openscap-1.4.4.tar.gz -> openscap-1.4.6.tar.gz ++++++ /work/SRC/openSUSE:Factory/openscap/openscap-1.4.4.tar.gz /work/SRC/openSUSE:Factory/.openscap.new.2252680/openscap-1.4.6.tar.gz differ: char 5, line 1 ++++++ openscap-1.4.4.tar.gz.sha512 -> openscap-1.4.6.tar.gz.sha512 ++++++ --- /work/SRC/openSUSE:Factory/openscap/openscap-1.4.4.tar.gz.sha512 2026-05-29 18:10:51.807782987 +0200 +++ /work/SRC/openSUSE:Factory/.openscap.new.2252680/openscap-1.4.6.tar.gz.sha512 2026-10-23 20:30:30.804156041 +0200 @@ -1 +1 @@ -c69736bee997e50a04aff8e4f22da880f342190e1289c5df0fb73b7af34833d3bd9f4e5055b227a18d571167671f821701a09f8c9a3e4568c7da68cc4be51133 openscap-1.4.4.tar.gz +4f4008ab6505bc4f4a68d2c15611062f3c41762f5dd37a02fcf1f37a5415776c0d52b4f32b3289adb4b22d8f82a8921fc59362a3cd130905fb70cd68dea96325 openscap-1.4.6.tar.gz
