Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package jline3 for openSUSE:Factory checked in at 2026-09-24 23:00:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jline3 (Old) and /work/SRC/openSUSE:Factory/.jline3.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jline3" Thu Sep 24 23:00:32 2026 rev:19 rq:1380197 version:3.30.17 Changes: -------- --- /work/SRC/openSUSE:Factory/jline3/jline3.changes 2026-07-24 22:05:55.890942981 +0200 +++ /work/SRC/openSUSE:Factory/.jline3.new.383539/jline3.changes 2026-09-24 23:02:22.748571324 +0200 @@ -1,0 +2,51 @@ +Wed Sep 23 13:12:53 UTC 2026 - Fridrich Strba <[email protected]> + +- Update to upstream version 3.30.17 + * Security Fixes + + Native Stack Buffer Overflow in Public INPUT_RECORD.memmove + JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) + + Authenticated SSH Shell Channel Resource Leak via Null or + Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj) + + Authenticated SSH DoS via Unbounded Window-Change Terminal + Geometry (GHSA-m935-wqpj-pvp3) + + TCP Socket File Descriptor Leak When Maximum Connections + Reached (GHSA-c87g-867h-cqr6) + * Bug Fixes + + strip control characters from file names in posix builtins + + bound !# history expansion to prevent exponential blowup + + verify server host keys in the ssh client builtin + + address remaining security vulnerabilities reported by + AFINE/CERT.PL + + backport security fixes from master + + backport security fixes to 3.x (path traversal + DSR plain + text) + + strip control characters from ssh banner and prompts + * Dependency updates + + bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to + 3.10.2 + + bump slf4j.version from 2.0.18 to 2.0.19 + + bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 + to 3.6.0 + + bump org.apache.maven.plugins:maven-compiler-plugin from + 3.15.0 to 3.16.0 + + bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.2 + + bump actions/setup-java from 5 to 6.0.0 + + bump org.graalvm.sdk:graal-sdk from 25.1.3 to 25.3.4.1 + + bump com.mycila:license-maven-plugin from 5.0.0 to 5.1.2 + + bump org.easymock:easymock from 5.6.0 to 5.7.0 + + bump com.google.jimfs:jimfs from 1.3.1 to 1.3.2 + + bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to + 3.3.4 + + bump org.apache.maven:apache-maven from 4.0.0-rc-3 to + 4.0.0-rc-6 + + bump eu.maveniverse.maven.njord:extension3 from 0.9.9 to + 0.9.10 + + bump com.palantir.javaformat:palantir-java-format from 2.96.0 + to 2.97.0 + + bump release-drafter/release-drafter from 7.6.0 to 7.7.0 + + bump groovy.version from 4.0.32 to 4.0.33 + + bump release-drafter/release-drafter from 7 to 7.6.0 + + bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to + 3.5.1 + +------------------------------------------------------------------- Old: ---- jline-3.30.16.tar.gz New: ---- jline-3.30.17.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jline3.spec ++++++ --- /var/tmp/diff_new_pack.cJVowo/_old 2026-09-24 23:02:23.488602267 +0200 +++ /var/tmp/diff_new_pack.cJVowo/_new 2026-09-24 23:02:23.489602309 +0200 @@ -32,7 +32,7 @@ %bcond_with ssh %bcond_with juniversalchardet Name: jline3 -Version: 3.30.16 +Version: 3.30.17 Release: 0 Summary: Java library for handling console input License: BSD-3-Clause ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.cJVowo/_old 2026-09-24 23:02:23.528603940 +0200 +++ /var/tmp/diff_new_pack.cJVowo/_new 2026-09-24 23:02:23.531604065 +0200 @@ -1,6 +1,6 @@ -mtime: 1784864841 -commit: c8a03ef836da308ae2f644c8c4e538e3902a131b4b5b6dce2d869bdbfd128d8c +mtime: 1790170139 +commit: 7c11837185170673d9d36f1e970143b4d00b2cd05561532e783c8f10ed3fa706 url: https://src.opensuse.org/java-packages/jline3 -revision: c8a03ef836da308ae2f644c8c4e538e3902a131b4b5b6dce2d869bdbfd128d8c +revision: 7c11837185170673d9d36f1e970143b4d00b2cd05561532e783c8f10ed3fa706 projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-23 15:28:59.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ jline-3.30.16.tar.gz -> jline-3.30.17.tar.gz ++++++ ++++ 2458 lines of diff (skipped) ++++++ jline3-build.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/common.xml new/common.xml --- old/common.xml 2026-07-24 05:36:11.171787178 +0200 +++ new/common.xml 2026-09-23 15:05:12.495023989 +0200 @@ -3,7 +3,7 @@ <project name="common" basedir="."> <property file="build.properties"/> - <property name="project.version" value="3.30.16"/> + <property name="project.version" value="3.30.17"/> <property name="project.groupId" value="org.jline"/> <property name="project.url" value="https://github.com/jline/jline3"/>
