Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package mongo-c-driver for openSUSE:Factory
checked in at 2026-11-05 18:20:18
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/mongo-c-driver (Old)
and /work/SRC/openSUSE:Factory/.mongo-c-driver.new.3759290 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mongo-c-driver"
Thu Nov 5 18:20:18 2026 rev:16 rq:1395044 version:2.5.8
Changes:
--------
--- /work/SRC/openSUSE:Factory/mongo-c-driver/mongo-c-driver.changes
2026-11-01 22:26:16.637117516 +0100
+++
/work/SRC/openSUSE:Factory/.mongo-c-driver.new.3759290/mongo-c-driver.changes
2026-11-05 18:21:48.379432285 +0100
@@ -1,0 +2,19 @@
+Tue Nov 3 20:04:43 UTC 2026 - Martin Hauke <[email protected]>
+
+- Update to version 2.5.8
+ libbson
+ * Fix possible truncation in BSON binary vector on 32-bit builds.
+ CVE-2026-120954
+ libmongoc
+ * Fix abort when parsing a cursor namespace without a dot separator.
+ * Fix possible abort in mongoc_gridfs_bucket_download_to_stream on
+ invalid file metadata. CVE-2026-120955
+ * Fix handling of embedded NUL bytes in namespaces. CVE-2026-120956
+ * Fix a missing bounds check when reading GridFS files.
+ CVE-2026-120684
+ * Fix a memory leak when an OP_COMPRESSED reply fails to parse.
+ CVE-2026-120678
+ * Report writeConcernError consistently, as mandated by the CRUD
+ spec.
+
+-------------------------------------------------------------------
Old:
----
mongo-c-driver-2.5.6.tar.gz
mongo-c-driver-2.5.7.tar.gz
New:
----
mongo-c-driver-2.5.8.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ mongo-c-driver.spec ++++++
--- /var/tmp/diff_new_pack.hQ1X9h/_old 2026-11-05 18:21:49.309470946 +0100
+++ /var/tmp/diff_new_pack.hQ1X9h/_new 2026-11-05 18:21:49.312471071 +0100
@@ -18,7 +18,7 @@
%define soname 2
Name: mongo-c-driver
-Version: 2.5.7
+Version: 2.5.8
Release: 0
Summary: Client library written in C for MongoDB
# See THIRD_PARTY_NOTICES
++++++ mongo-c-driver-2.5.6.tar.gz -> mongo-c-driver-2.5.8.tar.gz ++++++
/work/SRC/openSUSE:Factory/mongo-c-driver/mongo-c-driver-2.5.6.tar.gz
/work/SRC/openSUSE:Factory/.mongo-c-driver.new.3759290/mongo-c-driver-2.5.8.tar.gz
differ: char 13, line 1
