Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libXpm for openSUSE:Factory checked in at 2026-10-18 19:22:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libXpm (Old) and /work/SRC/openSUSE:Factory/.libXpm.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libXpm" Sun Oct 18 19:22:29 2026 rev:21 rq:1385479 version:3.5.20 Changes: -------- --- /work/SRC/openSUSE:Factory/libXpm/libXpm.changes 2026-09-28 10:35:01.666238564 +0200 +++ /work/SRC/openSUSE:Factory/.libXpm.new.3698736/libXpm.changes 2026-10-18 19:22:39.941122697 +0200 @@ -1,0 +2,10 @@ +Sat Oct 17 12:32:10 UTC 2026 - Stefan Dirsch <[email protected]> + +- Update to 3.5.20 + * This release fixes CVE-2026-94287. For more information, see the advisory: + https://lists.x.org/archives/xorg-announce/2026-October/003752.html +- supersedes the following patches + * 0001-boo1281669_CVE-2026-94287_ParsePixels-reject-zero-dimension-XPM-images.patch + * 0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch + +------------------------------------------------------------------- Old: ---- 0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch 0001-boo1281669_CVE-2026-94287_ParsePixels-reject-zero-dimension-XPM-images.patch libXpm-3.5.18.tar.xz libXpm-3.5.18.tar.xz.sig New: ---- libXpm-3.5.20.tar.xz libXpm-3.5.20.tar.xz.sig ----------(Old B)---------- Old: * 0001-boo1281669_CVE-2026-94287_ParsePixels-reject-zero-dimension-XPM-images.patch * 0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch Old:- supersedes the following patches * 0001-boo1281669_CVE-2026-94287_ParsePixels-reject-zero-dimension-XPM-images.patch * 0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libXpm.spec ++++++ --- /var/tmp/diff_new_pack.RSxBvO/_old 2026-10-18 19:22:41.266177595 +0200 +++ /var/tmp/diff_new_pack.RSxBvO/_new 2026-10-18 19:22:41.270177761 +0200 @@ -18,7 +18,7 @@ %define lname libXpm4 Name: libXpm -Version: 3.5.18 +Version: 3.5.20 Release: 0 Summary: X Pixmap image file format library License: MIT @@ -30,8 +30,6 @@ Source1: https://xorg.freedesktop.org/releases/individual/lib/%{name}-%{version}.tar.xz.sig Source2: libXpm.keyring Source9: baselibs.conf -Patch0: 0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch -Patch1: 0001-boo1281669_CVE-2026-94287_ParsePixels-reject-zero-dimension-XPM-images.patch BuildRequires: /usr/bin/gzip BuildRequires: autoconf BuildRequires: automake ++++++ libXpm-3.5.18.tar.xz -> libXpm-3.5.20.tar.xz ++++++ ++++ 13459 lines of diff (skipped)
