Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libsoup2 for openSUSE:Factory checked in at 2026-09-23 14:32:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libsoup2 (Old) and /work/SRC/openSUSE:Factory/.libsoup2.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libsoup2" Wed Sep 23 14:32:33 2026 rev:27 rq:1379608 version:2.74.3 Changes: -------- --- /work/SRC/openSUSE:Factory/libsoup2/libsoup2.changes 2026-08-22 21:33:52.503354421 +0200 +++ /work/SRC/openSUSE:Factory/.libsoup2.new.383539/libsoup2.changes 2026-09-23 14:33:06.452714103 +0200 @@ -1,0 +2,7 @@ +Mon Sep 21 08:51:36 UTC 2026 - Alynx Zhou <[email protected]> + +- Add libsoup2-CVE-2026-77680.patch: Fix flaw in HTTP Range header + processing. (bsc#1276759, CVE-2026-77680, bsc#1275988, + CVE-2026-77014, glgo#GNOME/libsoup!550). + +------------------------------------------------------------------- New: ---- libsoup2-CVE-2026-77680.patch ----------(New B)---------- New: - Add libsoup2-CVE-2026-77680.patch: Fix flaw in HTTP Range header processing. (bsc#1276759, CVE-2026-77680, bsc#1275988, ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libsoup2.spec ++++++ --- /var/tmp/diff_new_pack.D3Y86j/_old 2026-09-23 14:33:09.785853445 +0200 +++ /var/tmp/diff_new_pack.D3Y86j/_new 2026-09-23 14:33:09.789853612 +0200 @@ -110,6 +110,8 @@ Patch41: libsoup2-CVE-2026-1801.patch # PATCH-FIX-UPSTREAM libsoup2-CVE-2026-12548.patch bsc#1272196, glgo#GNOME/libsoup!524 [email protected] -- Fix heap out-of-bounds read flaw when parsing multipart HTTP messages Patch42: libsoup2-CVE-2026-12548.patch +# PATCH-FIX-UPSTREAM libsoup2-CVE-2026-77680.patch bsc#1276759, bsc#1275988, glgo#GNOME/libsoup!550 [email protected] -- Fix flaw in HTTP Range heaader processing +Patch43: libsoup2-CVE-2026-77680.patch BuildRequires: glib-networking BuildRequires: meson >= 0.50 ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.D3Y86j/_old 2026-09-23 14:33:09.980861598 +0200 +++ /var/tmp/diff_new_pack.D3Y86j/_new 2026-09-23 14:33:09.987861890 +0200 @@ -1,6 +1,7 @@ -mtime: 1787205793 -commit: 477fc31aece51ac6c883bd5c9d0c9e8282da564593c6c3fdf15e9378f47362a5 +mtime: 1789997740 +commit: 987683895276916fd7ff1ac2f6f74d00e739b13313153be3eaff48c5dd08508e url: https://src.opensuse.org/GNOME/libsoup2 -revision: 477fc31aece51ac6c883bd5c9d0c9e8282da564593c6c3fdf15e9378f47362a5 +revision: 987683895276916fd7ff1ac2f6f74d00e739b13313153be3eaff48c5dd08508e +trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-21 15:35:40.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ libsoup2-CVE-2026-77680.patch ++++++ ++++ 822 lines (skipped)
