Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cherrytree for openSUSE:Factory checked in at 2026-11-11 16:29:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cherrytree (Old) and /work/SRC/openSUSE:Factory/.cherrytree.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cherrytree" Wed Nov 11 16:29:44 2026 rev:44 rq:1396858 version:1.7.3 Changes: -------- --- /work/SRC/openSUSE:Factory/cherrytree/cherrytree.changes 2026-09-22 15:55:00.366663055 +0200 +++ /work/SRC/openSUSE:Factory/.cherrytree.new.3759290/cherrytree.changes 2026-11-11 16:30:19.312437548 +0100 @@ -1,0 +2,20 @@ +Mon Nov 09 05:43:30 UTC 2026 - Bjørn Lie <[email protected]> + +- Update to version 1.7.3: + * fixed command injection with custom link actions (CVE-2026-118692) + * fixed arbitrary local file read via crafted embedded-file name + (CVE-2026-118693) + * reject symlinked multifile node directories + prevent cleanup from following + symlinks + * reject empty tables during XML parsing so malformed XML cannot reach table + construction or clipboard indexing + * on node name header, show node icon and aux icons on the left rather than on + the right, just after last visited nodes buttons + * improved image download on HTML paste from browser + * fixed crash when destroying anchored widgets + * build with libxml++5 on windows/msys2, ubuntu 26.04+, flatpak + * Updated translations. +- Update version dependencies according to meson.build. +- Refresh patch with quilt. + +------------------------------------------------------------------- Old: ---- _servicedata cherrytree-1.7.2.tar.xz New: ---- cherrytree-1.7.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cherrytree.spec ++++++ --- /var/tmp/diff_new_pack.1Jy7GY/_old 2026-11-11 16:30:21.017509089 +0100 +++ /var/tmp/diff_new_pack.1Jy7GY/_new 2026-11-11 16:30:21.019509173 +0100 @@ -17,7 +17,7 @@ Name: cherrytree -Version: 1.7.2 +Version: 1.7.3 Release: 0 Summary: A hierarchical note taking application License: GPL-3.0-or-later AND LGPL-2.1-only @@ -34,7 +34,7 @@ BuildRequires: gcc-c++ BuildRequires: ninja BuildRequires: python3-lxml -BuildRequires: pkgconfig(fmt) +BuildRequires: pkgconfig(fmt) >= 6.0 BuildRequires: pkgconfig(gspell-1) BuildRequires: pkgconfig(gtkmm-3.0) BuildRequires: pkgconfig(gtksourceview-4) ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.1Jy7GY/_old 2026-11-11 16:30:21.061510935 +0100 +++ /var/tmp/diff_new_pack.1Jy7GY/_new 2026-11-11 16:30:21.066511145 +0100 @@ -1,7 +1,7 @@ -mtime: 1789638384 -commit: a64f2e9ecf8af20fe4f84f8048d0bb77b5dd1542f44eef5fab7593a7944e2baf +mtime: 1794203565 +commit: bc2dc46d8b8adeeb3972290ea63bcdf8ba6f924ae80c5438c331028634362152 url: https://src.opensuse.org/GNOME/cherrytree -revision: a64f2e9ecf8af20fe4f84f8048d0bb77b5dd1542f44eef5fab7593a7944e2baf +revision: bc2dc46d8b8adeeb3972290ea63bcdf8ba6f924ae80c5438c331028634362152 trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ _service ++++++ --- /var/tmp/diff_new_pack.1Jy7GY/_old 2026-11-11 16:30:21.093512278 +0100 +++ /var/tmp/diff_new_pack.1Jy7GY/_new 2026-11-11 16:30:21.098512488 +0100 @@ -4,8 +4,8 @@ <param name="url">https://github.com/giuspen/cherrytree.git</param> <param name="scm">git</param> <param name="submodules">enable</param> - <param name="revision">v1.7.2</param> - <param name="changesgenerate">enable</param> + <param name="revision">v1.7.3</param> +<!-- <param name="changesgenerate">enable</param> --> <param name="filename">cherrytree</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">v?(.*)\+0</param> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-11-09 06:52:45.000000000 +0100 @@ -0,0 +1,5 @@ +*.obscpio +*.osc +_build.* +.pbuild +osc-collab.* ++++++ cherrytree-1.7.2.tar.xz -> cherrytree-1.7.3.tar.xz ++++++ /work/SRC/openSUSE:Factory/cherrytree/cherrytree-1.7.2.tar.xz /work/SRC/openSUSE:Factory/.cherrytree.new.3759290/cherrytree-1.7.3.tar.xz differ: char 15, line 1 ++++++ cherrytree-set-git-version.patch ++++++ --- /var/tmp/diff_new_pack.1Jy7GY/_old 2026-11-11 16:30:21.296520796 +0100 +++ /var/tmp/diff_new_pack.1Jy7GY/_new 2026-11-11 16:30:21.299520922 +0100 @@ -1,13 +1,14 @@ -diff -Naur a/CMakeLists.txt b/CMakeLists.txt ---- a/CMakeLists.txt 2020-11-21 07:41:58.000000000 -0600 -+++ b/CMakeLists.txt 2020-11-21 08:27:00.146401506 -0600 -@@ -4,7 +4,7 @@ - +Index: cherrytree-1.7.3/CMakeLists.txt +=================================================================== +--- cherrytree-1.7.3.orig/CMakeLists.txt ++++ cherrytree-1.7.3/CMakeLists.txt +@@ -4,7 +4,7 @@ project(cherrytree) + file(READ "debian/changelog" CHANGELOG) string(REGEX MATCH "cherrytree +\\(([0-9]+)\\.([0-9]+)\\.([0-9]+)[-+]" _ ${CHANGELOG}) -set(CT_VERSION ${CMAKE_MATCH_1}.${CMAKE_MATCH_2}.${CMAKE_MATCH_3}) +option(CT_VERSION ${CMAKE_MATCH_1}.${CMAKE_MATCH_2}.${CMAKE_MATCH_3}) - set(CT_VERSION_WINDOWS ${CMAKE_MATCH_1},${CMAKE_MATCH_2},${CMAKE_MATCH_3},0) + set(CT_VERSION_WINDOWS_BUILD 0) + set(CT_VERSION_WINDOWS ${CMAKE_MATCH_1},${CMAKE_MATCH_2},${CMAKE_MATCH_3},${CT_VERSION_WINDOWS_BUILD}) message(STATUS "CT_VERSION = ${CT_VERSION}") - ++++++ cherrytree.obsinfo ++++++ --- /var/tmp/diff_new_pack.1Jy7GY/_old 2026-11-11 16:30:21.326522055 +0100 +++ /var/tmp/diff_new_pack.1Jy7GY/_new 2026-11-11 16:30:21.333522348 +0100 @@ -1,5 +1,5 @@ name: cherrytree -version: 1.7.2 -mtime: 1787417585 -commit: 76bbccce9443aa68b45b369b70998df872cac7d0 +version: 1.7.3 +mtime: 1794046611 +commit: 69f9a40f249856c631f88ddee2be4b0d489d2cac
