Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libpff for openSUSE:Factory checked in at 2026-11-09 16:07:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libpff (Old) and /work/SRC/openSUSE:Factory/.libpff.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libpff" Mon Nov 9 16:07:09 2026 rev:19 rq:1396257 version:20261030 Changes: -------- --- /work/SRC/openSUSE:Factory/libpff/libpff.changes 2026-09-28 10:47:58.174765814 +0200 +++ /work/SRC/openSUSE:Factory/.libpff.new.3759290/libpff.changes 2026-11-09 16:07:57.829160253 +0100 @@ -1,0 +2,8 @@ +Mon Nov 9 07:11:24 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 20261030 + * Fix a heap out-of-bounds read [CVE-2026-116736, boo#1288071], + an incorrect bounds check [CVE-2026-116735, boo#1288072] and + an integer underflow [CVE-2026-110598, boo#1285654]. + +------------------------------------------------------------------- Old: ---- libpff-alpha-20260926.tar.gz libpff-alpha-20260926.tar.gz.asc New: ---- libpff-alpha-20261030.tar.gz libpff-alpha-20261030.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libpff.spec ++++++ --- /var/tmp/diff_new_pack.kSK2Nv/_old 2026-11-09 16:07:58.891204739 +0100 +++ /var/tmp/diff_new_pack.kSK2Nv/_new 2026-11-09 16:07:58.893204823 +0100 @@ -18,7 +18,7 @@ Name: libpff %define lname libpff1 -Version: 20260926 +Version: 20261030 Release: 0 Summary: Library and tools to access Microsoft PFF/OFF/PST/OST/PAB files License: GFDL-1.1-or-later AND LGPL-3.0-or-later AND GFDL-1.3-or-later ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.kSK2Nv/_old 2026-11-09 16:07:58.938206707 +0100 +++ /var/tmp/diff_new_pack.kSK2Nv/_new 2026-11-09 16:07:58.942206875 +0100 @@ -1,5 +1,5 @@ -mtime: 1790504453 -commit: 8c173090de8421fd087b4674f0ff7aa1c2ec23488f5d5ce538ee54fde0239e76 +mtime: 1794208615 +commit: f82f94abaa19ac06e92fc1e7b9c330f1310fc9735e7d61b1fa9eb414192f0178 url: https://src.opensuse.org/security-forensics/libpff revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-11-09 08:16:55.000000000 +0100 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ libpff-alpha-20260926.tar.gz -> libpff-alpha-20261030.tar.gz ++++++ ++++ 2929 lines of diff (skipped)
