Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libostree for openSUSE:Factory checked in at 2026-08-22 21:34:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libostree (Old) and /work/SRC/openSUSE:Factory/.libostree.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libostree" Sat Aug 22 21:34:33 2026 rev:56 rq:1372776 version:2026.4 Changes: -------- --- /work/SRC/openSUSE:Factory/libostree/libostree.changes 2026-08-09 21:34:00.339451500 +0200 +++ /work/SRC/openSUSE:Factory/.libostree.new.1258/libostree.changes 2026-08-22 21:35:35.746025733 +0200 @@ -1,0 +2,19 @@ +Thu Aug 20 07:19:27 UTC 2026 - Andreas Stieger <[email protected]> + +- Update to 2026.4: + * Revert the static delta decompression-size safety margin + introduced in 2026.3, which turned out to reject legitimate + large deltas at apply time -- most visibly, Flathub Firefox + updates were failing with Decompressed delta part exceeds + configured limit. Both the margin heuristic and the flat 512MiB + per-part decompression cap it fed into have been dropped for + now. This deliberately reopens a DoS (unbounded decompression + of a given delta part) until a precise, per-part exact-size- + based replacement lands in a future release. The LZMA decoder + memory limit (100 MiB) from that same advisory's fix is + unaffected and remains in place (boo#1273918) + * core: fixed a bug that caused every other xattr entry to be + skipped during validation, letting a crafted xattr array hide + unsorted or duplicate entries in odd-indexed slots + +------------------------------------------------------------------- Old: ---- libostree-2026.3.tar.xz New: ---- libostree-2026.4.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libostree.spec ++++++ --- /var/tmp/diff_new_pack.qLTsWF/_old 2026-08-22 21:35:36.430050123 +0200 +++ /var/tmp/diff_new_pack.qLTsWF/_new 2026-08-22 21:35:36.431050159 +0200 @@ -24,7 +24,7 @@ %bcond_without ed25519 %bcond_with tests Name: libostree -Version: 2026.3 +Version: 2026.4 Release: 0 Summary: Git for operating system binaries License: LGPL-2.0-or-later ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.qLTsWF/_old 2026-08-22 21:35:36.483052013 +0200 +++ /var/tmp/diff_new_pack.qLTsWF/_new 2026-08-22 21:35:36.491052298 +0200 @@ -1,6 +1,6 @@ -mtime: 1786048222 -commit: c41debb0476ba3192f2487ee586056936c4e4fdaa4e3ce4def1e921c344640d7 +mtime: 1787210559 +commit: 104283c59cd2a9b1b7552d35eb767c79ad71b947cfb76a4e8e9d5991c6c8106f url: https://src.opensuse.org/GNOME/libostree -revision: c41debb0476ba3192f2487ee586056936c4e4fdaa4e3ce4def1e921c344640d7 +revision: 104283c59cd2a9b1b7552d35eb767c79ad71b947cfb76a4e8e9d5991c6c8106f projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-20 09:22:39.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ libostree-2026.3.tar.xz -> libostree-2026.4.tar.xz ++++++ ++++ 16431 lines of diff (skipped)
