Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Brotli for openSUSE:Factory checked in at 2026-10-27 18:21:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Brotli (Old) and /work/SRC/openSUSE:Factory/.python-Brotli.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-Brotli" Tue Oct 27 18:21:22 2026 rev:8 rq:1392953 version:1.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Brotli/python-Brotli.changes 2025-11-12 21:42:22.832644825 +0100 +++ /work/SRC/openSUSE:Factory/.python-Brotli.new.2252680/python-Brotli.changes 2026-10-27 18:21:44.487578801 +0100 @@ -1,0 +2,6 @@ +Tue Oct 27 06:57:55 UTC 2026 - Dirk Müller <[email protected]> + +- update to 1.2.1 (bsc#1287779, CVE-2026-111497): + * Brotli decoder out-of-bounds write permits remote code execution + +------------------------------------------------------------------- Old: ---- brotli-1.2.0.tar.gz New: ---- brotli-1.2.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Brotli.spec ++++++ --- /var/tmp/diff_new_pack.nXA8HN/_old 2026-10-27 18:21:48.654753337 +0100 +++ /var/tmp/diff_new_pack.nXA8HN/_new 2026-10-27 18:21:48.658753505 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-Brotli # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-Brotli -Version: 1.2.0 +Version: 1.2.1 Release: 0 Summary: Python bindings for the Brotli compression library License: Apache-2.0 ++++++ brotli-1.2.0.tar.gz -> brotli-1.2.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-Brotli/brotli-1.2.0.tar.gz /work/SRC/openSUSE:Factory/.python-Brotli.new.2252680/brotli-1.2.1.tar.gz differ: char 5, line 1
