Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libxls for openSUSE:Factory checked in at 2026-10-12 22:08:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libxls (Old) and /work/SRC/openSUSE:Factory/.libxls.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libxls" Mon Oct 12 22:08:20 2026 rev:8 rq:1384316 version:1.6.4 Changes: -------- --- /work/SRC/openSUSE:Factory/libxls/libxls.changes 2025-01-05 15:29:12.836721889 +0100 +++ /work/SRC/openSUSE:Factory/.libxls.new.3698736/libxls.changes 2026-10-12 22:08:28.400439481 +0200 @@ -1,0 +2,13 @@ +Mon Oct 12 12:55:49 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 1.6.4 + * Fix use of uninitialized memory in OLE parsing (CVE-2026-26825) + * Fix use of uninitialized memory in read_MSAT (CVE-2026-26824) + * Fix use of uninitialized memory in xls_parseWorkBook + * Fix out-of-bounds reads in the formula dumper + * Handle allocation failures in OLE, workbook and string code + * Read SummaryInformation streams at their real size + * Keep full precision when converting numeric cells to strings + * Fix "creation of UTF-8 locale failed" in xls2csv + +------------------------------------------------------------------- Old: ---- libxls-1.6.3.tar.gz New: ---- libxls-1.6.4.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxls.spec ++++++ --- /var/tmp/diff_new_pack.ZMnDXV/_old 2026-10-12 22:08:29.522486287 +0200 +++ /var/tmp/diff_new_pack.ZMnDXV/_new 2026-10-12 22:08:29.524486371 +0200 @@ -1,7 +1,7 @@ # # spec file for package libxls # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ Name: libxls %define lname libxlsreader8 -Version: 1.6.3 +Version: 1.6.4 Release: 0 Summary: Library for Parsing Excel (XLS) Files License: BSD-2-Clause ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.ZMnDXV/_old 2026-10-12 22:08:29.585488915 +0200 +++ /var/tmp/diff_new_pack.ZMnDXV/_new 2026-10-12 22:08:29.589489082 +0200 @@ -1,5 +1,5 @@ -mtime: 1735247335 -commit: 23239e83c6b71cc8fd808bfe21fffcf044d31683d80eea40561877997408dad6 +mtime: 1791809830 +commit: 733656b253e72eafa3b73af0c077fc18479b8b49ac3693945966311a95655a6b url: https://src.opensuse.org/clibs/libxls revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-12 14:57:10.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ libxls-1.6.3.tar.gz -> libxls-1.6.4.tar.gz ++++++ ++++ 21867 lines of diff (skipped)
