Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package prismlauncher for openSUSE:Factory checked in at 2026-09-29 17:51:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/prismlauncher (Old) and /work/SRC/openSUSE:Factory/.prismlauncher.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "prismlauncher" Tue Sep 29 17:51:58 2026 rev:5 rq:1381322 version:11.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/prismlauncher/prismlauncher.changes 2026-09-04 12:42:43.251453474 +0200 +++ /work/SRC/openSUSE:Factory/.prismlauncher.new.383539/prismlauncher.changes 2026-09-29 17:54:27.968947896 +0200 @@ -1,0 +2,6 @@ +Tue Sep 29 07:15:31 UTC 2026 - Илья Индиго <[email protected]> + +- Updated to 11.1.1 + * https://github.com/PrismLauncher/PrismLauncher/releases/tag/11.1.1 + +------------------------------------------------------------------- Old: ---- PrismLauncher-11.1.0.tar.gz New: ---- PrismLauncher-11.1.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ prismlauncher.spec ++++++ --- /var/tmp/diff_new_pack.YtOo6v/_old 2026-09-29 17:54:29.815024972 +0200 +++ /var/tmp/diff_new_pack.YtOo6v/_new 2026-09-29 17:54:29.821025222 +0200 @@ -19,7 +19,7 @@ %define __builder ninja %define _name PrismLauncher Name: prismlauncher -Version: 11.1.0 +Version: 11.1.1 Release: 0 Summary: A custom launcher for Minecraft License: GPL-3.0-only AND Apache-2.0 AND LGPL-3.0-only AND OFL-1.1 AND LGPL-2.1-only AND MIT AND BSD-3-Clause ++++++ PrismLauncher-11.1.0.tar.gz -> PrismLauncher-11.1.1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/PrismLauncher-11.1.0/.github/actions/setup-dependencies/windows/action.yml new/PrismLauncher-11.1.1/.github/actions/setup-dependencies/windows/action.yml --- old/PrismLauncher-11.1.0/.github/actions/setup-dependencies/windows/action.yml 2026-09-03 08:14:38.000000000 +0200 +++ new/PrismLauncher-11.1.1/.github/actions/setup-dependencies/windows/action.yml 2026-09-29 00:36:26.000000000 +0200 @@ -24,7 +24,6 @@ uses: ilammy/msvc-dev-cmd@v1 with: arch: ${{ inputs.vcvars-arch }} - vsversion: 2022 - name: Setup Java (MSVC) uses: actions/setup-java@v5 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/PrismLauncher-11.1.0/CMakeLists.txt new/PrismLauncher-11.1.1/CMakeLists.txt --- old/PrismLauncher-11.1.0/CMakeLists.txt 2026-09-03 08:14:38.000000000 +0200 +++ new/PrismLauncher-11.1.1/CMakeLists.txt 2026-09-29 00:36:26.000000000 +0200 @@ -181,7 +181,7 @@ ######## Set version numbers ######## set(Launcher_VERSION_MAJOR 11) set(Launcher_VERSION_MINOR 1) -set(Launcher_VERSION_PATCH 0) +set(Launcher_VERSION_PATCH 1) set(Launcher_VERSION_NAME "${Launcher_VERSION_MAJOR}.${Launcher_VERSION_MINOR}.${Launcher_VERSION_PATCH}") set(Launcher_VERSION_NAME4 "${Launcher_VERSION_MAJOR}.${Launcher_VERSION_MINOR}.${Launcher_VERSION_PATCH}.0") diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/PrismLauncher-11.1.0/launcher/modplatform/flame/FlameInstanceCreationTask.cpp new/PrismLauncher-11.1.1/launcher/modplatform/flame/FlameInstanceCreationTask.cpp --- old/PrismLauncher-11.1.0/launcher/modplatform/flame/FlameInstanceCreationTask.cpp 2026-09-03 08:14:38.000000000 +0200 +++ new/PrismLauncher-11.1.1/launcher/modplatform/flame/FlameInstanceCreationTask.cpp 2026-09-29 00:36:26.000000000 +0200 @@ -355,7 +355,13 @@ } if (!m_pack.overrides.isEmpty()) { - QString overridePath = FS::PathCombine(m_stagingPath, m_pack.overrides); + const auto overridePath = FS::PathCombine(m_stagingPath, m_pack.overrides); + if (!QUrl::fromLocalFile(m_stagingPath).isParentOf(QUrl::fromLocalFile(overridePath))) { + // This means we somehow got out of the root folder, so abort here to prevent exploits + setError(tr("The overrides has a path that leads to an arbitrary location (%1). This is a security risk and isn't allowed.") + .arg(m_pack.overrides)); + return nullptr; + } if (QFile::exists(overridePath)) { // Create a list of overrides in "overrides.txt" inside flame/ Override::createOverrides("overrides", parent_folder, overridePath);
