Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package apache-commons-codec for
openSUSE:Factory checked in at 2026-11-11 16:24:22
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/apache-commons-codec (Old)
and /work/SRC/openSUSE:Factory/.apache-commons-codec.new.3759290 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apache-commons-codec"
Wed Nov 11 16:24:22 2026 rev:32 rq:1396510 version:1.23.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/apache-commons-codec/apache-commons-codec.changes
2026-05-07 15:43:23.231241403 +0200
+++
/work/SRC/openSUSE:Factory/.apache-commons-codec.new.3759290/apache-commons-codec.changes
2026-11-11 16:24:28.162707064 +0100
@@ -1,0 +2,76 @@
+Tue Nov 10 12:44:55 UTC 2026 - Fridrich Strba <[email protected]>
+
+- Update to 1.23.0
+ * New features
+ + Add and use PhoneticEngine.Builder and deprecate old
+ constructors
+ + Add BeiderMorseEncoder.Builder and deprecate old constructor
+ + Add PhoneticEngine.Builder.setMaxInputLength(int)
+ + Add Base45 support
+ + Add URLCodec.decodeUrl(BitSet, byte[]) to decode with a custom
+ safe set
+ * Fixed Bugs
+ + GitIdentifiers orders tree entries by unsigned UTF-8 bytes, as
+ Git does, instead of UTF-16 code units
+ + Optimize PhoneticEngine.encode(String, LanguageSet) for speed
+ + RFC1522Codec.decodeText(String) now throws a DecoderException
+ instead of a StringIndexOutOfBoundsException when a separator
+ is missing
+ + Optimize Base58.convertFromBase58(byte[], Context) for speed
+ and temporary object allocation
+ + Allocate a single MessageDigest and use it in
+ Sha2Crypt.sha2Crypt(byte[], String, String, int, String)
+ + Javadoc improvements
+ + Throw IOException instead of IllegalArgumentException in
+ BaseNCodecOutputStream and BaseNCodecOutputStream IO methods
+ + Throw DecoderException instead of IllegalArgumentException in
+ RFC1522Codec.decodeText(String)
+ + Fix Blake3 KDF example and clarify finalization semantics
+ (CVE-2026-119078, bsc#1289854)
+ + Base32 and Base64 STRICT decoding now require the encoder's
+ canonical alphabet, padding, and line separators, and validate
+ streams through EOF. Use LENIENT to retain permissive decoding
+ + Limit Base58 decoding to 8192 encoded bytes by default,
+ checking cumulative stream input before buffering. Use
+ Base58.Builder.setMaxDecodeLength(int) for larger trusted
+ input. Encoding defaults to a configurable 8192-byte binary
+ input limit through Base58.Builder.setMaxEncodeLength(int)
+ + Grow Base58 accumulation buffers geometrically within the
+ configured input limits and validate actual accumulated length
+ + Implement Base58 encoded-length calculation and explicitly
+ reject unsupported line chunking
+ + Close the underlying BaseNCodecOutputStream output even when
+ final conversion or flushing fails, preserving suppressed
+ close exceptions
+ + Reject invalid GitIdentifiers tree entry names and
+ file/directory name conflicts to prevent ambiguous tree
+ serialization and colliding identifiers (CVE-2026-124077,
+ bsc#1289853)
+ + Hex decoding now accepts only ASCII hexadecimal characters
+ (0-9, A-F, a-f). Previously accepted non-ASCII Unicode digits
+ and fullwidth letters now cause DecoderException, including
+ when supplied as UTF-8 bytes or ByteBuffers
+ + Restrict Hex decoding to ASCII hexadecimal characters
+ + Validate BinaryCodec input while preserving leading-bit
+ truncation
+ + Reject oversized Beider-Morse input before language guessing
+ + QuotedPrintableCodec decoding now preserves hard CRLF line
+ breaks and, leniently, unpaired CR and LF bytes instead of
+ discarding them. Soft line breaks require the full =CRLF
+ sequence; previously accepted =CR without LF now throws
+ DecoderException. This affects both constructor modes and
+ QCodec, which shares the decoder
+ + Bound Sha2Crypt rounds from caller-supplied salts
+ + Bound Sha2Crypt password length to prevent quadratic CPU DoS
+ + Make the @param names in BaseNCodec match the parameters they
+ document
+ + CODEC-345: Restore URLCodec.encodeUrl(BitSet, byte[]) support
+ for custom safe sets containing percent and plus, and document
+ the decoding limitations
+ + CODEC-245: Reject malformed Sha2Crypt salt syntax
+ * Changes
+ + Bump org.apache.commons:commons-parent from 103 to 105
+ + [test] Bump org.apache.commons:commons-lang3 from 3.20.0 to
+ 3.21.0
+
+-------------------------------------------------------------------
Old:
----
commons-codec-1.22.0-src.tar.gz
commons-codec-1.22.0-src.tar.gz.asc
New:
----
commons-codec-1.23.0-src.tar.gz
commons-codec-1.23.0-src.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ apache-commons-codec.spec ++++++
--- /var/tmp/diff_new_pack.7CXRe4/_old 2026-11-11 16:24:29.691771198 +0100
+++ /var/tmp/diff_new_pack.7CXRe4/_new 2026-11-11 16:24:29.693771282 +0100
@@ -20,7 +20,7 @@
%define base_name codec
%define short_name commons-%{base_name}
Name: apache-commons-codec
-Version: 1.22.0
+Version: 1.23.0
Release: 0
Summary: Apache Commons Codec Package
License: Apache-2.0
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.7CXRe4/_old 2026-11-11 16:24:29.746773505 +0100
+++ /var/tmp/diff_new_pack.7CXRe4/_new 2026-11-11 16:24:29.752773757 +0100
@@ -1,6 +1,6 @@
-mtime: 1778051400
-commit: f11fc375bc5a6d57d892688dbbe3c862d782148b94ffb7bc46a7355417b3788e
+mtime: 1794315853
+commit: 53a8d5255e9921752ca576f1c9796ec7c9d2beda454dc7ac71a3f8df297cc682
url: https://src.opensuse.org/java-packages/apache-commons-codec
-revision: f11fc375bc5a6d57d892688dbbe3c862d782148b94ffb7bc46a7355417b3788e
+revision: 53a8d5255e9921752ca576f1c9796ec7c9d2beda454dc7ac71a3f8df297cc682
projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj
++++++ apache-commons-codec-build.xml ++++++
--- /var/tmp/diff_new_pack.7CXRe4/_old 2026-11-11 16:24:29.776774763 +0100
+++ /var/tmp/diff_new_pack.7CXRe4/_new 2026-11-11 16:24:29.781774973 +0100
@@ -18,7 +18,7 @@
<property name="project.organization.name" value="The Apache Software
Foundation"/>
<property name="project.organization.url"
value="http://commons.apache.org/proper/commons-codec/"/>
- <property name="spec.version" value="1.22"/>
+ <property name="spec.version" value="1.23"/>
<property name="project.version" value="${spec.version}.0"/>
<property name="bundle.version" value="${project.version}"/>
<property name="bundle.symbolicName"
value="org.apache.commons.commons-codec"/>
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-11-10 14:04:13.000000000 +0100
@@ -0,0 +1 @@
+.osc
++++++ commons-codec-1.22.0-src.tar.gz -> commons-codec-1.23.0-src.tar.gz ++++++
++++ 19657 lines of diff (skipped)
