Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package librsvg for openSUSE:Factory checked in at 2026-09-24 22:55:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/librsvg (Old) and /work/SRC/openSUSE:Factory/.librsvg.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "librsvg" Thu Sep 24 22:55:33 2026 rev:159 rq:1379982 version:2.62.4 Changes: -------- --- /work/SRC/openSUSE:Factory/librsvg/librsvg.changes 2026-08-19 17:56:37.237331704 +0200 +++ /work/SRC/openSUSE:Factory/.librsvg.new.383539/librsvg.changes 2026-09-24 22:55:55.950380511 +0200 @@ -1,0 +2,11 @@ +Tue Sep 22 06:52:20 UTC 2026 - Bjørn Lie <[email protected]> + +- Update to version 2.62.4: + + librsvg crate version 2.62.4 + + librsvg-rebind crate version 0.3.0 + + Fix use-after-free when there are duplicate XML entities in + nested Xinclude documents. + + Dependency updates: lopdf for RUSTSEC-2026-0187, + crossbeam-epoch for RUSTSEC-2026-0204. + +------------------------------------------------------------------- Old: ---- librsvg-2.62.3.tar.xz New: ---- librsvg-2.62.4.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ librsvg.spec ++++++ --- /var/tmp/diff_new_pack.vLy2z3/_old 2026-09-24 22:56:00.294562056 +0200 +++ /var/tmp/diff_new_pack.vLy2z3/_new 2026-09-24 22:56:00.297562181 +0200 @@ -20,7 +20,7 @@ %define librsvg_sover 2 Name: librsvg -Version: 2.62.3 +Version: 2.62.4 Release: 0 Summary: A Library for Rendering SVG Data License: LGPL-2.1-or-later AND MIT ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.vLy2z3/_old 2026-09-24 22:56:00.340563978 +0200 +++ /var/tmp/diff_new_pack.vLy2z3/_new 2026-09-24 22:56:00.345564187 +0200 @@ -1,6 +1,7 @@ -mtime: 1786025159 -commit: 49b076491d87ad9f5a1485a89d9b636cddad7eb974251af68c5ec38230d36cdd +mtime: 1790060009 +commit: 2760c63b7564b68873421ff4f1b5d60a5dd9c27edabeb6e4c3dcca9511631676 url: https://src.opensuse.org/GNOME/librsvg -revision: 49b076491d87ad9f5a1485a89d9b636cddad7eb974251af68c5ec38230d36cdd +revision: 2760c63b7564b68873421ff4f1b5d60a5dd9c27edabeb6e4c3dcca9511631676 +trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ _service ++++++ --- /var/tmp/diff_new_pack.vLy2z3/_old 2026-09-24 22:56:00.372565316 +0200 +++ /var/tmp/diff_new_pack.vLy2z3/_new 2026-09-24 22:56:00.377565525 +0200 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://gitlab.gnome.org/GNOME/librsvg.git</param> <param name="scm">git</param> - <param name="revision">2.62.3</param> + <param name="revision">2.62.4</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-22 08:53:29.000000000 +0200 @@ -0,0 +1,5 @@ +*.obscpio +*.osc +_build.* +.pbuild +osc-collab.* ++++++ librsvg-2.62.3.tar.xz -> librsvg-2.62.4.tar.xz ++++++ /work/SRC/openSUSE:Factory/librsvg/librsvg-2.62.3.tar.xz /work/SRC/openSUSE:Factory/.librsvg.new.383539/librsvg-2.62.4.tar.xz differ: char 15, line 1 ++++++ librsvg.obsinfo ++++++ --- /var/tmp/diff_new_pack.vLy2z3/_old 2026-09-24 22:56:00.545572546 +0200 +++ /var/tmp/diff_new_pack.vLy2z3/_new 2026-09-24 22:56:00.548572671 +0200 @@ -1,5 +1,5 @@ name: librsvg -version: 2.62.3 -mtime: 1780360278 -commit: 3bff095d38e1e174c5e9fd81f9a4d65d0ef09f77 +version: 2.62.4 +mtime: 1790043444 +commit: 6ae003b048b3fefc5df770b71719d3bd2635e86c ++++++ vendor.tar.xz ++++++ /work/SRC/openSUSE:Factory/librsvg/vendor.tar.xz /work/SRC/openSUSE:Factory/.librsvg.new.383539/vendor.tar.xz differ: char 15, line 1
