Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package icinga-php-thirdparty for
openSUSE:Factory checked in at 2026-10-01 16:42:42
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/icinga-php-thirdparty (Old)
and /work/SRC/openSUSE:Factory/.icinga-php-thirdparty.new.1253 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "icinga-php-thirdparty"
Thu Oct 1 16:42:42 2026 rev:8 rq:1381578 version:1.0.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/icinga-php-thirdparty/icinga-php-thirdparty.changes
2026-06-12 19:31:50.432979767 +0200
+++
/work/SRC/openSUSE:Factory/.icinga-php-thirdparty.new.1253/icinga-php-thirdparty.changes
2026-10-01 16:44:17.878131850 +0200
@@ -1,0 +2,42 @@
+Tue Sep 29 14:22:25 UTC 2026 - ecsos <[email protected]> - 1.0.1
+
+- Update to 1.0.1
+ * react/http
+ - GHSA-x424-64qh-5j54 A malformed HTTP chunked body can lead to a
denial-of-service and peg the CPU
+ - GHSA-g4f2-2pf3-2pwj Unbounded HTTP Client Response Header Buffering
Leads to Memory Exhaustion DoS
+ * guzzlehttp/guzzle
+ - GHSA-v5mv-p594-2x33 Noncanonical host can bypass host-based checks
+ - GHSA-f7vp-7xgx-4w4r Noncanonical cookie domain keeps subdomain scope
+ - GHSA-wm3w-8rrp-j577 Host-only cookie scope is not preserved
+ - GHSA-f283-ghqc-fg79 Unbounded response cookies risk denial of service
+ - GHSA-h95v-h523-3mw8 URI fragments disclosed in redirect Referer headers
+ - GHSA-94pj-82f3-465w Proxy-Authorization headers can be sent to origin
servers
+ * dompdf/dompdf
+ - GHSA-cx96-42px-69fm Local file read due to improper file path validation
in SVG images encoded as data-URI
+ - GHSA-wvh6-f5jh-8gw4 Chroot Validation Bypass
+- Changes from 1.0.0
+ * Breaking Changes
+ - Bump react/promise to ^3.3 and remove clue/soap-react (#93)
+ - This update adds PHP 8.5 support through react/promise 3.3.0.
+ react/promise 3.x is not a drop-in replacement for 2.x, so consumers
that use its promise API directly may need changes.
+ clue/soap-react was removed because it pinned an older react/promise
range and blocked the upgrade.
+ - Remove wikimedia/less.php (#115)
+ - LESS-to-CSS compilation moved to ipl-Web, so this bundle no longer needs
wikimedia/less.php.
+ - Remove clue/block-react (#94, #102)
+ - clue/block-react is abandoned. Use react/async instead.
+- Changes from 0.15.4
+ * react/http
+ - GHSA-x424-64qh-5j54 A malformed HTTP chunked body can lead to a
denial-of-service and peg the CPU
+ - GHSA-g4f2-2pf3-2pwj Unbounded HTTP Client Response Header Buffering
Leads to Memory Exhaustion DoS
+ * guzzlehttp/guzzle
+ - GHSA-v5mv-p594-2x33 Noncanonical host can bypass host-based checks
+ - GHSA-f7vp-7xgx-4w4r Noncanonical cookie domain keeps subdomain scope
+ - GHSA-wm3w-8rrp-j577 Host-only cookie scope is not preserved
+ - GHSA-f283-ghqc-fg79 Unbounded response cookies risk denial of service
+ - GHSA-h95v-h523-3mw8 URI fragments disclosed in redirect Referer headers
+ - GHSA-94pj-82f3-465w Proxy-Authorization headers can be sent to origin
servers
+ * dompdf/dompdf
+ - GHSA-cx96-42px-69fm Local file read due to improper file path validation
in SVG images encoded as data-URI
+ - GHSA-wvh6-f5jh-8gw4 Chroot Validation Bypass
+
+-------------------------------------------------------------------
Old:
----
icinga-php-thirdparty-0.15.3.tar.gz
New:
----
icinga-php-thirdparty-1.0.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ icinga-php-thirdparty.spec ++++++
--- /var/tmp/diff_new_pack.RwI398/_old 2026-10-01 16:44:18.669165010 +0200
+++ /var/tmp/diff_new_pack.RwI398/_new 2026-10-01 16:44:18.675165261 +0200
@@ -20,7 +20,7 @@
%global module_name icinga-php-thirdparty
%global basedir %{_datadir}/icinga-php/vendor
Name: %{module_name}
-Version: 0.15.3
+Version: 1.0.1
Release: %{revision}%{?dist}
Summary: Icinga PHP Thirdparty for Icinga Web 2
License: MIT
++++++ icinga-php-thirdparty-0.15.3.tar.gz ->
icinga-php-thirdparty-1.0.1.tar.gz ++++++
/work/SRC/openSUSE:Factory/icinga-php-thirdparty/icinga-php-thirdparty-0.15.3.tar.gz
/work/SRC/openSUSE:Factory/.icinga-php-thirdparty.new.1253/icinga-php-thirdparty-1.0.1.tar.gz
differ: char 48, line 2
