Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package expat for openSUSE:Factory checked in at 2026-11-03 17:51:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/expat (Old) and /work/SRC/openSUSE:Factory/.expat.new.1257 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "expat" Tue Nov 3 17:51:01 2026 rev:91 rq:1394454 version:2.10.0 Changes: -------- --- /work/SRC/openSUSE:Factory/expat/expat.changes 2026-10-10 14:55:21.145873648 +0200 +++ /work/SRC/openSUSE:Factory/.expat.new.1257/expat.changes 2026-11-03 17:51:03.296008460 +0100 @@ -1,0 +2,21 @@ +Mon Nov 2 10:20:22 UTC 2026 - David Anes <[email protected]> + +- update to 2.10.0: + * Security fixes: + * CVE-2026-113351, bsc#1286599: denial of service with use of + XML_ParserReset + * CVE-2026-115506, bsc#1287856: detect billion laughs attacks + quicker and more of its variations + * CVE-2026-117610, bsc#1288868: fix initial non-final empty + subparser parse calls, was segfaulting + * CVE-2026-118370, bsc#1288849: protect attIndex and nPrefixes in + storeAtts from signed integer overflow + * Bug fixes: + * Initialize m_parsingStatus.finalBuffer in parserInit + * Improve XML_Parse for XML_CONTEXT_BYTES == 0 + * Use C99 length modifiers for ptrdiff_t and size_t + * Check isCalledFromInsideHandler first in XML_Parse + * Add missing check for a character handler reset + * Library version bumped from 14:0:13 to 14:1:13 + +------------------------------------------------------------------- Old: ---- expat-2.9.0.tar.xz expat-2.9.0.tar.xz.asc New: ---- expat-2.10.0.tar.xz expat-2.10.0.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ expat.spec ++++++ --- /var/tmp/diff_new_pack.TSxAxY/_old 2026-11-03 17:51:05.894117066 +0100 +++ /var/tmp/diff_new_pack.TSxAxY/_new 2026-11-03 17:51:05.897117191 +0100 @@ -17,10 +17,10 @@ # -%global unversion 2_9_0 +%global unversion 2_10_0 %define sover 1 Name: expat -Version: 2.9.0 +Version: 2.10.0 Release: 0 Summary: XML Parser Toolkit License: MIT ++++++ expat-2.9.0.tar.xz -> expat-2.10.0.tar.xz ++++++ ++++ 3373 lines of diff (skipped)
