Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package open-isns for openSUSE:Factory checked in at 2026-08-05 17:47:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/open-isns (Old) and /work/SRC/openSUSE:Factory/.open-isns.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "open-isns" Wed Aug 5 17:47:42 2026 rev:21 rq:1369569 version:0.103+4.60de8b5 Changes: -------- --- /work/SRC/openSUSE:Factory/open-isns/open-isns.changes 2025-01-25 19:09:39.245707628 +0100 +++ /work/SRC/openSUSE:Factory/.open-isns.new.16738/open-isns.changes 2026-08-05 17:47:57.104892876 +0200 @@ -1,0 +2,7 @@ +Tue Jul 28 18:17:34 UTC 2026 - Lee Duncan <[email protected]> + +- Update to version 0.103+4.60de8b5: + * Fix issue in error path causing double-free. + Fixes issue CVE-2026-55995 bsc#1268685 + +------------------------------------------------------------------- @@ -284,2 +290,0 @@ - -------------------------------------------------------------------- Old: ---- open-isns-0.103+2.296d533bd52a.tar.xz New: ---- open-isns-0.103+4.60de8b5.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ open-isns.spec ++++++ --- /var/tmp/diff_new_pack.vkbAmf/_old 2026-08-05 17:47:57.688913412 +0200 +++ /var/tmp/diff_new_pack.vkbAmf/_new 2026-08-05 17:47:57.692913553 +0200 @@ -1,7 +1,7 @@ # # spec file for package open-isns # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,7 +26,7 @@ Summary: Partial Implementation of iSNS iSCSI registration License: LGPL-2.1-or-later Group: System/Kernel -Version: 0.103+2.296d533bd52a +Version: 0.103+4.60de8b5 Release: 0 Source: %{name}-%{version}.tar.xz URL: https://github.com/open-iscsi/%{name} ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.vkbAmf/_old 2026-08-05 17:47:57.756915803 +0200 +++ /var/tmp/diff_new_pack.vkbAmf/_new 2026-08-05 17:47:57.760915944 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/open-iscsi/open-isns.git</param> - <param name="changesrevision">296d533bd52ad6b901cd7b8464ebab526aa7a975</param></service></servicedata> + <param name="changesrevision">60de8b521e7eccca376977481b69d49dd73e9e29</param></service></servicedata> (No newline at EOF) ++++++ open-isns-0.103+2.296d533bd52a.tar.xz -> open-isns-0.103+4.60de8b5.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-isns-0.103+2.296d533bd52a/.gitignore new/open-isns-0.103+4.60de8b5/.gitignore --- old/open-isns-0.103+2.296d533bd52a/.gitignore 2024-11-05 22:30:27.000000000 +0100 +++ new/open-isns-0.103+4.60de8b5/.gitignore 1970-01-01 01:00:00.000000000 +0100 @@ -1,4 +0,0 @@ -TAGS -tags -cscope.files -.setup* diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-isns-0.103+2.296d533bd52a/attrs.c new/open-isns-0.103+4.60de8b5/attrs.c --- old/open-isns-0.103+2.296d533bd52a/attrs.c 2024-11-05 22:30:27.000000000 +0100 +++ new/open-isns-0.103+4.60de8b5/attrs.c 2026-07-28 20:14:21.000000000 +0200 @@ -1371,6 +1371,7 @@ value->iv_string = isns_malloc(len + 1); if (!buf_get(bp, value->iv_string, len)) { isns_free(value->iv_string); + value->iv_string = NULL; return 0; } value->iv_string[len] = '\0'; @@ -1546,6 +1547,7 @@ value->iv_opaque.ptr = isns_malloc(len); if (!buf_get(bp, value->iv_opaque.ptr, len)) { isns_free(value->iv_opaque.ptr); + value->iv_opaque.ptr = NULL; return 0; }
