Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package zvbi for openSUSE:Factory checked in at 2026-10-26 09:57:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zvbi (Old) and /work/SRC/openSUSE:Factory/.zvbi.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "zvbi" Mon Oct 26 09:57:56 2026 rev:38 rq:1392152 version:0.2.46 Changes: -------- --- /work/SRC/openSUSE:Factory/zvbi/zvbi.changes 2026-09-01 15:46:31.790929657 +0200 +++ /work/SRC/openSUSE:Factory/.zvbi.new.2252680/zvbi.changes 2026-10-26 09:57:58.778620737 +0100 @@ -1,0 +2,6 @@ +Fri Oct 23 19:52:12 UTC 2026 - Dirk Müller <[email protected]> + +- update to 0.2.46: + * Apply security updates. + +------------------------------------------------------------------- Old: ---- v0.2.45.tar.gz New: ---- v0.2.46.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zvbi.spec ++++++ --- /var/tmp/diff_new_pack.od4Yc8/_old 2026-10-26 09:57:59.516651699 +0100 +++ /var/tmp/diff_new_pack.od4Yc8/_new 2026-10-26 09:57:59.518651783 +0100 @@ -20,7 +20,7 @@ %define libname lib%{name}%{sover} %define libchains lib%{name}-chains%{sover} Name: zvbi -Version: 0.2.45 +Version: 0.2.46 Release: 0 Summary: Linux "VBI proxy" License: GPL-2.0-or-later AND LGPL-2.1-or-later ++++++ v0.2.45.tar.gz -> v0.2.46.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/ChangeLog new/zvbi-0.2.46/ChangeLog --- old/zvbi-0.2.45/ChangeLog 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/ChangeLog 2026-10-22 18:52:14.000000000 +0200 @@ -1,3 +1,9 @@ +2026-10-22 Ileana Dumitrescu <[email protected]> + + * Release 0.2.46 + + * src/packet.c: Out-of-bounds write in Teletext DRCS decoder. + 2026-08-12 Ileana Dumitrescu <[email protected]> * Release 0.2.45 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/NEWS new/zvbi-0.2.46/NEWS --- old/zvbi-0.2.45/NEWS 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/NEWS 2026-10-22 18:52:14.000000000 +0200 @@ -1,3 +1,7 @@ +libzvbi 0.2.46, 2026-10-22 +-------------------------- +Apply security updates. + libzvbi 0.2.45, 2026-08-12 -------------------------- Update Swedish translations. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/configure.ac new/zvbi-0.2.46/configure.ac --- old/zvbi-0.2.45/configure.ac 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/configure.ac 2026-10-22 18:52:14.000000000 +0200 @@ -2,7 +2,7 @@ dnl Autoconf initialization AC_PREREQ([2.71]) -AC_INIT([zvbi],[0.2.45]) +AC_INIT([zvbi],[0.2.46]) AC_CONFIG_SRCDIR(src/vbi.c) AC_CONFIG_HEADERS([config.h]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/de.po new/zvbi-0.2.46/po/de.po --- old/zvbi-0.2.45/po/de.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/de.po 2026-10-22 18:52:14.000000000 +0200 @@ -3,7 +3,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2007-11-27 18:33+0100\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/[email protected] new/zvbi-0.2.46/po/[email protected] --- old/zvbi-0.2.45/po/[email protected] 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/[email protected] 2026-10-22 18:52:14.000000000 +0200 @@ -30,7 +30,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2013-08-28 16:25+0200\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/[email protected] new/zvbi-0.2.46/po/[email protected] --- old/zvbi-0.2.45/po/[email protected] 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/[email protected] 2026-10-22 18:52:14.000000000 +0200 @@ -27,7 +27,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2013-08-28 16:25+0200\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/es.po new/zvbi-0.2.46/po/es.po --- old/zvbi-0.2.45/po/es.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/es.po 2026-10-22 18:52:14.000000000 +0200 @@ -4,7 +4,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2007-11-27 18:34+0100\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/fr.po new/zvbi-0.2.46/po/fr.po --- old/zvbi-0.2.45/po/fr.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/fr.po 2026-10-22 18:52:14.000000000 +0200 @@ -3,7 +3,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2007-11-27 18:35+0100\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/it.po new/zvbi-0.2.46/po/it.po --- old/zvbi-0.2.45/po/it.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/it.po 2026-10-22 18:52:14.000000000 +0200 @@ -4,7 +4,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2007-11-27 18:37+0100\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/ka.po new/zvbi-0.2.46/po/ka.po --- old/zvbi-0.2.45/po/ka.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/ka.po 2026-10-22 18:52:14.000000000 +0200 @@ -5,7 +5,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2022-12-13 22:02+0100\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/nl.po new/zvbi-0.2.46/po/nl.po --- old/zvbi-0.2.45/po/nl.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/nl.po 2026-10-22 18:52:14.000000000 +0200 @@ -5,7 +5,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2007-11-27 18:38+0100\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/pl.po new/zvbi-0.2.46/po/pl.po --- old/zvbi-0.2.45/po/pl.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/pl.po 2026-10-22 18:52:14.000000000 +0200 @@ -3,7 +3,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2024-11-29 16:28+0200\n" "PO-Revision-Date: 2004-10-25 12:24+0200\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/po/sv.po new/zvbi-0.2.46/po/sv.po --- old/zvbi-0.2.45/po/sv.po 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/po/sv.po 2026-10-22 18:52:14.000000000 +0200 @@ -4,7 +4,7 @@ # msgid "" msgstr "" -"Project-Id-Version: zvbi 0.2.45\n" +"Project-Id-Version: zvbi 0.2.46\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2003-10-16 16:13+0200\n" "PO-Revision-Date: 2025-10-15 07:45+0200\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/src/libzvbi.h new/zvbi-0.2.46/src/libzvbi.h --- old/zvbi-0.2.45/src/libzvbi.h 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/src/libzvbi.h 2026-10-22 18:52:14.000000000 +0200 @@ -27,7 +27,7 @@ #define VBI_VERSION_MAJOR 0 #define VBI_VERSION_MINOR 2 -#define VBI_VERSION_MICRO 45 +#define VBI_VERSION_MICRO 46 #ifdef __cplusplus extern "C" { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/src/packet.c new/zvbi-0.2.46/src/packet.c --- old/zvbi-0.2.45/src/packet.c 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/src/packet.c 2026-10-22 18:52:14.000000000 +0200 @@ -396,8 +396,14 @@ p = raw; d = vtp->data.drcs.chars[0]; + /* chars has room for 48 slots. The widest slot (6x5x4) writes 120 + bytes, so stop before any slot could pass the end of the buffer. */ + uint8_t *d_end = (uint8_t *) vtp->data.drcs.chars + + sizeof (vtp->data.drcs.chars); for (i = 0; i < 48; i++) { + if (d + 120 > d_end) + break; switch (vtp->data.drcs.mode[i]) { case DRCS_MODE_12_10_1: for (j = 0; j < 20; d += 3, j++) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zvbi-0.2.45/src/version.h new/zvbi-0.2.46/src/version.h --- old/zvbi-0.2.45/src/version.h 2026-08-12 16:49:11.000000000 +0200 +++ new/zvbi-0.2.46/src/version.h 2026-10-22 18:52:14.000000000 +0200 @@ -1,4 +1,4 @@ /* TODO: Generate these based on configure.ac*/ #define VBI_VERSION_MAJOR 0 #define VBI_VERSION_MINOR 2 -#define VBI_VERSION_MICRO 45 +#define VBI_VERSION_MICRO 46
