Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package logback for openSUSE:Factory checked in at 2026-10-03 20:13:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/logback (Old) and /work/SRC/openSUSE:Factory/.logback.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "logback" Sat Oct 3 20:13:55 2026 rev:20 rq:1382219 version:1.6.5 Changes: -------- --- /work/SRC/openSUSE:Factory/logback/logback.changes 2026-10-02 23:05:57.347850740 +0200 +++ /work/SRC/openSUSE:Factory/.logback.new.1631729/logback.changes 2026-10-03 20:15:58.841746757 +0200 @@ -6,7 +6,7 @@ - + Fixed a vulnerability closely related to CVE-2026-19880 - (bsc#1284020). The fix made in version 1.6.3, which strips - forward and backward slashes from MDC values, was not - sufficient. An MDC value could still contain relative path - components such as .., variable references such as /, or - characters that are special in file name patterns and email - addresses. + + Fixed a vulnerability (bsc#1284124, CVE-2026-104721) closely + related to CVE-2026-19880 (bsc#1284020). The fix made in + version 1.6.3, which strips forward and backward slashes from + MDC values, was not sufficient. An MDC value could still + contain relative path components such as .., variable + references such as /, or characters that are special in file + name patterns and email addresses. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.ZCXk6O/_old 2026-10-03 20:15:59.619779289 +0200 +++ /var/tmp/diff_new_pack.ZCXk6O/_new 2026-10-03 20:15:59.622779415 +0200 @@ -1,6 +1,6 @@ -mtime: 1790940378 -commit: 630bedad76379d92f75801fc98ed543ab292d246590ce2ddeb66dd065fe15744 +mtime: 1791013532 +commit: 87aa58da9cb681b441e1bef60857ced0eb0bbde4ab303a7470c00c8bb621a441 url: https://src.opensuse.org/java-packages/logback -revision: 630bedad76379d92f75801fc98ed543ab292d246590ce2ddeb66dd065fe15744 +revision: 87aa58da9cb681b441e1bef60857ced0eb0bbde4ab303a7470c00c8bb621a441 projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-03 09:45:32.000000000 +0200 @@ -0,0 +1 @@ +.osc
