Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package fwupd for openSUSE:Factory checked in at 2026-06-10 15:45:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fwupd (Old) and /work/SRC/openSUSE:Factory/.fwupd.new.2375 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fwupd" Wed Jun 10 15:45:04 2026 rev:115 rq:1358149 version:2.1.4 Changes: -------- --- /work/SRC/openSUSE:Factory/fwupd/fwupd.changes 2026-05-28 23:08:19.746492146 +0200 +++ /work/SRC/openSUSE:Factory/.fwupd.new.2375/fwupd.changes 2026-06-10 15:45:26.969563970 +0200 @@ -1,0 +2,71 @@ +Fri May 29 15:25:44 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 2.1.4: + + This release adds the following features: + - Add a libcrypto-based JCat implementation for Android + - Add support for NixOS to the quickstart script + - Add support for the Compal BIOS version format + - Allow a remote to specify that a username or password is required + - Allow storing a per-user password in XDG_CONFIG_HOME + - Detect encrypted swap devices below device-mapper + - Ensure that all firmware subclasses set the maximum size + - Remove the flashrom plugin + - Save the SMBIOS BiosReleaseDate string to uploaded reports + - Tell Star Labs coreboot users to manually update when required + + This release fixes the following bugs: + - Add a retry limit when updating failing Goodix MoC devices + - Add several bounds checks for when updating Dell docks + - Add vendor name and name for the various Framework UEFI certificates + - Allow recovery if the Lenovo dock internal state is invalid + - Avoid truncation when calculating the AMD GPU atombios size + - Check firmware size against Novatek flash start address + - Check for config offset overflow when updating Synaptics RMI devices + - Check for multiplication overflow in BCM57xx stage1 size calculation + - Check for overflow when writing to CCGX DMC devices + - Check stream size before calculating Legion HID ID offset + - Check stream size before subtracting Ilitek ITS CRC length + - Clear Sunplus camera download state if the previous flash failed + - Do not show plugin warnings when using --version + - Filter the install flags provided by the D-Bus client + - Fix a potential heap buffer overflow in FDT strlist parsing + - Fix a potential heap buffer overflow in Nordic HID peer validation + - Fix a potential OOB read in DFOTA modem response parsing + - Fix a potential path traversal vulnerability in firmware backup + - Fix a regression when searching for file magic + - Fix a regression when using report-export --sign + - Fix fwupd domain check bypass when using Qubes + - Ignore efivar free space requirement on Microsoft Hyper-V hosts + - Limit the number of hints a D-Bus client can set + - Limit the size of parsed USB descriptors to ~64KiB + - Make it easy to enable an authenticated remote + - Make the Novatek boot update more reliable + - Only read BCR from Intel SPI controllers + - Prevent a possible division by zero error in the progressbar code + - Prevent decompression bomb attacks in uSWID zlib payload parsing + - Prevent NVRAM-seeded ptential path traversal when loading ESP files + - Redact the username and password of remotes when using a non-active console + - Require authorization for firmware installation on emulated devices + - Require authorization for more D-Bus methods from non-local users + - Restrict Curl protocols to prevent potential SSRF attacks + - Restrict ModifyRemote to prevent a supply-chain redirection + - Show a short easy-to-read string as the Pixart touchpad name + - Tolerate post-quantum CA PKCS#7 failures when using Qubes + - Validate ACPI PHAT specific data offset before parsing + - Validate Corsair write size before subtracting header size + - Validate DFU address offset before parsing the header + - Validate Elan touchpad IAP address is within firmware bounds + - Validate Logitech TAP AP region bounds before calculating size + - Validate payload length is large enough for FPC sec-link + - Validate sector range before writing pixart-tp firmware + - Validate VBE area start does not exceed area size + - Validate write offset does not exceed TI TPS6598x stream size + + This release adds support for the following hardware: + - Egis MoC devices with PID 9201 + - Intel Arc Pro B65 and Arc Pro B70 (#10389) + - Lenovo dock devices in 'provisioned' mode + - Pixart TP devices with PID 1343 + - Several GigaDevice and Puya SPI chips +- Drop no longer needed BuildRequires: pkgconfig(jcat), + pkgconfig(flashrom) + +------------------------------------------------------------------- Old: ---- fwupd-2.1.3.obscpio New: ---- fwupd-2.1.4.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fwupd.spec ++++++ --- /var/tmp/diff_new_pack.W6CxSS/_old 2026-06-10 15:45:28.101610882 +0200 +++ /var/tmp/diff_new_pack.W6CxSS/_new 2026-06-10 15:45:28.101610882 +0200 @@ -43,7 +43,7 @@ %define shlib_sover 3 Name: fwupd -Version: 2.1.3 +Version: 2.1.4 Release: 0 Summary: Device firmware updater daemon License: GPL-2.0-or-later AND LGPL-2.1-or-later @@ -80,9 +80,6 @@ BuildRequires: pkgconfig(bash-completion) BuildRequires: pkgconfig(cairo) BuildRequires: pkgconfig(colorhug) >= 1.2.12 -%ifnarch s390x ppc64le -BuildRequires: pkgconfig(flashrom) -%endif BuildRequires: pkgconfig(gi-docgen) BuildRequires: pkgconfig(gio-2.0) >= 2.45.8 BuildRequires: pkgconfig(gio-unix-2.0) >= 2.48.8 @@ -93,7 +90,6 @@ BuildRequires: pkgconfig(gthread-2.0) BuildRequires: pkgconfig(gudev-1.0) >= 232 BuildRequires: pkgconfig(gusb) >= 0.2.9 -BuildRequires: pkgconfig(jcat) >= 0.1.3 BuildRequires: pkgconfig(libcurl) >= 7.62.0 BuildRequires: pkgconfig(libdrm_amdgpu) BuildRequires: pkgconfig(libelf) @@ -232,9 +228,6 @@ -Dvalgrind=disabled \ -Dvendor_ids_dir=/usr/share/hwdata \ -Dman=true \ -%ifarch s390x ppc64le - -Dplugin_flashrom=disabled \ -%endif %ifnarch %{ix86} x86_64 -Dhsi=disabled \ %endif @@ -349,9 +342,6 @@ %{_datadir}/icons/hicolor/* %{_prefix}/lib/systemd/system-shutdown/fwupd.shutdown %dir %{_libdir}/fwupd-* -%ifnarch s390x ppc64le -%{_libdir}/fwupd-*/libfu_plugin_flashrom.so -%endif %{_libdir}/fwupd-*/libfu_plugin_modem_manager.so %{_libdir}/fwupd-*/libfwupdengine.so %{_libdir}/fwupd-*/libfwupdplugin.so ++++++ _service ++++++ --- /var/tmp/diff_new_pack.W6CxSS/_old 2026-06-10 15:45:28.149612871 +0200 +++ /var/tmp/diff_new_pack.W6CxSS/_new 2026-06-10 15:45:28.153613037 +0200 @@ -4,7 +4,7 @@ <param name="url">https://github.com/fwupd/fwupd.git</param> <param name="scm">git</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> - <param name="revision">2.1.3</param> + <param name="revision">2.1.4</param> <param name="versionrewrite-pattern">(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> </service> ++++++ fwupd-2.1.3.obscpio -> fwupd-2.1.4.obscpio ++++++ ++++ 42015 lines of diff (skipped) ++++++ fwupd.obsinfo ++++++ --- /var/tmp/diff_new_pack.W6CxSS/_old 2026-06-10 15:45:55.186733271 +0200 +++ /var/tmp/diff_new_pack.W6CxSS/_new 2026-06-10 15:45:55.190733437 +0200 @@ -1,5 +1,5 @@ name: fwupd -version: 2.1.3 -mtime: 1778580282 -commit: af55b0bc26231e4bd2ef46e68a7adcd35e82709d +version: 2.1.4 +mtime: 1780066659 +commit: 2496d94c1840802566306f1a14ceb0714479a2e5
