Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libguestfs for openSUSE:Factory checked in at 2022-07-21 11:33:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libguestfs (Old) and /work/SRC/openSUSE:Factory/.libguestfs.new.1523 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libguestfs" Thu Jul 21 11:33:19 2022 rev:83 rq:990308 version:1.48.4 Changes: -------- --- /work/SRC/openSUSE:Factory/libguestfs/libguestfs.changes 2022-07-02 15:34:28.519011735 +0200 +++ /work/SRC/openSUSE:Factory/.libguestfs.new.1523/libguestfs.changes 2022-07-21 11:33:52.146975889 +0200 @@ -1,0 +2,9 @@ +Tue Jul 12 15:53:22 MDT 2022 - [email protected] + +- Update to version 1.48.4 + * This is a bug fix release +- Drop patches included in new tarball + CVE-2022-2211-docs-guestfs-security-document.patch + CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch + +------------------------------------------------------------------- @@ -4,2 +13 @@ -- bsc#1201064 - Libguestfs: Buffer overflow in get_keys leads - to DOS - CVE-2022-2211 +- CVE-2022-2211 - Fix buffer overflow in get_keys() Old: ---- CVE-2022-2211-docs-guestfs-security-document.patch CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch libguestfs-1.48.3.tar.gz libguestfs-1.48.3.tar.gz.sig New: ---- libguestfs-1.48.4.tar.gz libguestfs-1.48.4.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libguestfs.spec ++++++ --- /var/tmp/diff_new_pack.VlfwdR/_old 2022-07-21 11:33:52.674976409 +0200 +++ /var/tmp/diff_new_pack.VlfwdR/_new 2022-07-21 11:33:52.678976413 +0200 @@ -18,7 +18,7 @@ Name: libguestfs ExclusiveArch: x86_64 ppc64 ppc64le s390x aarch64 -Version: 1.48.3 +Version: 1.48.4 Release: 0 Summary: Access and modify virtual machine disk images License: GPL-2.0-or-later @@ -32,8 +32,6 @@ Source101: README # Patches -Patch1: CVE-2022-2211-options-fix-buffer-overflow-in-get_keys.patch -Patch2: CVE-2022-2211-docs-guestfs-security-document.patch BuildRequires: bison BuildRequires: file-devel ++++++ libguestfs-1.48.3.tar.gz -> libguestfs-1.48.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/libguestfs/libguestfs-1.48.3.tar.gz /work/SRC/openSUSE:Factory/.libguestfs.new.1523/libguestfs-1.48.4.tar.gz differ: char 13, line 1
