Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package htop for openSUSE:Factory checked in at 2026-08-17 16:59:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/htop (Old) and /work/SRC/openSUSE:Factory/.htop.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "htop" Mon Aug 17 16:59:06 2026 rev:67 rq:1371506 version:3.5.3 Changes: -------- --- /work/SRC/openSUSE:Factory/htop/htop.changes 2026-07-20 10:01:34.956658241 +0200 +++ /work/SRC/openSUSE:Factory/.htop.new.1258/htop.changes 2026-08-17 17:02:32.713562969 +0200 @@ -1,0 +2,24 @@ +Mon Aug 17 05:59:52 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 3.5.3: + * Improve the htoprc settings parser to avoid segfaults on + tampered configuration files (sanitised sort keys, validated + configuration invariants, NULL safety for header columns and + screens) + * Add zswap pool usage meters + * Fix out-of-bounds access when parsing the power supply type + (Linux) + * Mark a CPU offline when it is unplugged from the middle and + release its data on hot-unplug (Linux) + * Fix a Clang MemorySanitizer-reported issue + * Exit follow mode when a search or filter is cancelled + * Fix blank STARTTIME and wrong ELAPSED for threads (Darwin) + * Use strchr instead of strstr in XUtils + * Document the CPU meter segments in the man page and add an + External Libraries section covering libnl-3/libnl-genl-3 +- CVE-2024-37676: out-of-bounds access in + Header_populateFromSettings reachable from a tampered htoprc; + the settings parser hardening above is what upstream lists as + covering it. openSUSE is assessed not affected (boo#1226729) + +------------------------------------------------------------------- Old: ---- htop-3.5.2.tar.xz New: ---- htop-3.5.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ htop.spec ++++++ --- /var/tmp/diff_new_pack.iRp5NC/_old 2026-08-17 17:02:33.502590847 +0200 +++ /var/tmp/diff_new_pack.iRp5NC/_new 2026-08-17 17:02:33.506590988 +0200 @@ -17,7 +17,7 @@ Name: htop -Version: 3.5.2 +Version: 3.5.3 Release: 0 Summary: An Interactive text-mode Process Viewer for Linux License: GPL-2.0-or-later ++++++ htop-3.5.2.tar.xz -> htop-3.5.3.tar.xz ++++++ ++++ 1935 lines of diff (skipped)
