Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libcotp for openSUSE:Factory checked in at 2026-09-24 22:59:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libcotp (Old) and /work/SRC/openSUSE:Factory/.libcotp.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libcotp" Thu Sep 24 22:59:26 2026 rev:20 rq:1380122 version:4.2.2 Changes: -------- --- /work/SRC/openSUSE:Factory/libcotp/libcotp.changes 2026-07-02 20:14:44.828379491 +0200 +++ /work/SRC/openSUSE:Factory/.libcotp.new.383539/libcotp.changes 2026-09-24 23:01:31.794440737 +0200 @@ -1,0 +2,19 @@ +Thu Sep 24 08:16:45 UTC 2026 - Paolo Stivanin <[email protected]> + +- Update to 4.2.2: + * Hardening and bug-fix release, no API or ABI changes + * get_totp_at, get_steam_totp_at and get_yaotp_at now reject + negative timestamps with INVALID_COUNTER + * validate_totp_in_window: overflow-checked window arithmetic and + explicit INT_MIN rejection + * otpauth/yaotp URIs: reject blank secrets and truncated + percent-escapes, an empty label issuer no longer shadows + issuer=, replaced secrets are securely zeroed, and the + track_id/uid cap is enforced in _build + * HMAC backends: NULL-handle guards and fix an OpenSSL MAC context + leak on re-key + * HOTP counter encoded as fixed 8-byte big-endian + * CMake/pkg-config: backend private libs propagated for static + consumers, -O3 only in Release builds + +------------------------------------------------------------------- Old: ---- v4.2.1.tar.gz v4.2.1.tar.gz.asc New: ---- v4.2.2.tar.gz v4.2.2.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libcotp.spec ++++++ --- /var/tmp/diff_new_pack.oSrgWN/_old 2026-09-24 23:01:33.242501286 +0200 +++ /var/tmp/diff_new_pack.oSrgWN/_new 2026-09-24 23:01:33.243501328 +0200 @@ -24,7 +24,7 @@ %define libsoname %{name}4 Name: libcotp -Version: 4.2.1 +Version: 4.2.2 Release: 0 Summary: C library for generating TOTP and HOTP License: Apache-2.0 ++++++ v4.2.1.tar.gz -> v4.2.2.tar.gz ++++++ ++++ 2362 lines of diff (skipped)
