Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package patch for openSUSE:Factory checked in at 2026-10-27 16:46:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/patch (Old) and /work/SRC/openSUSE:Factory/.patch.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "patch" Tue Oct 27 16:46:12 2026 rev:52 rq:1392640 version:2.8.1 Changes: -------- --- /work/SRC/openSUSE:Factory/patch/patch.changes 2026-07-12 16:19:50.013288541 +0200 +++ /work/SRC/openSUSE:Factory/.patch.new.2252680/patch.changes 2026-10-27 16:46:17.067750883 +0100 @@ -1,0 +2,10 @@ +Sat Oct 24 07:16:23 UTC 2026 - Andreas Stieger <[email protected]> + +- update to 2.8.1: + * CVE-2026-115207: Prevent creation of out-of-tree files + (boo#1286941) +- drop patches now included: + * avoid-null-pointer-derefence-with-bad-hunks.patch + * dont-infloop-on-null-ranges.patch + +------------------------------------------------------------------- Old: ---- avoid-null-pointer-derefence-with-bad-hunks.patch dont-infloop-on-null-ranges.patch patch-2.8.tar.xz patch-2.8.tar.xz.sig New: ---- patch-2.8.1.tar.xz patch-2.8.1.tar.xz.sig ----------(Old B)---------- Old:- drop patches now included: * avoid-null-pointer-derefence-with-bad-hunks.patch * dont-infloop-on-null-ranges.patch Old: * avoid-null-pointer-derefence-with-bad-hunks.patch * dont-infloop-on-null-ranges.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ patch.spec ++++++ --- /var/tmp/diff_new_pack.ap3jbc/_old 2026-10-27 16:46:17.943787577 +0100 +++ /var/tmp/diff_new_pack.ap3jbc/_new 2026-10-27 16:46:17.945787661 +0100 @@ -2,7 +2,7 @@ # spec file for package patch # # Copyright (c) 2026 SUSE LLC and contributors -# Copyright (c) 2025 Andreas Stieger <[email protected]> +# Copyright (c) 2026 Andreas Stieger <[email protected]> # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ Name: patch -Version: 2.8 +Version: 2.8.1 Release: 0 Summary: GNU patch License: GPL-3.0-or-later @@ -30,8 +30,6 @@ Source3: patch.keyring Patch14: CVE-2019-20633.patch Patch15: CVE-2021-45261.patch -Patch16: avoid-null-pointer-derefence-with-bad-hunks.patch -Patch17: dont-infloop-on-null-ranges.patch BuildRequires: ed # See bnc#662957. The fix for CVE-2010-4651 breaks the way interdiff was # invoking patch, so interdiff had to be fixed too. ++++++ patch-2.8.tar.xz -> patch-2.8.1.tar.xz ++++++ ++++ 50658 lines of diff (skipped)
