Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sofia-sip for openSUSE:Factory checked in at 2026-10-29 16:09:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sofia-sip (Old) and /work/SRC/openSUSE:Factory/.sofia-sip.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sofia-sip" Thu Oct 29 16:09:38 2026 rev:25 rq:1393565 version:1.13.19 Changes: -------- --- /work/SRC/openSUSE:Factory/sofia-sip/sofia-sip.changes 2026-08-21 22:17:39.854675353 +0200 +++ /work/SRC/openSUSE:Factory/.sofia-sip.new.1255/sofia-sip.changes 2026-10-29 16:11:48.761831307 +0100 @@ -1,0 +2,6 @@ +Wed Oct 28 08:08:37 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 1.13.19: + CVE-2026-110658: Fix out-of-bounds read in msg_mime multipart + +------------------------------------------------------------------- Old: ---- sofia-sip-1.13.18.tar.xz New: ---- sofia-sip-1.13.19.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sofia-sip.spec ++++++ --- /var/tmp/diff_new_pack.3SCezY/_old 2026-10-29 16:11:49.560864816 +0100 +++ /var/tmp/diff_new_pack.3SCezY/_new 2026-10-29 16:11:49.562864900 +0100 @@ -19,7 +19,7 @@ %define pkg_major 1.13 %define with_doxygen 0 Name: sofia-sip -Version: 1.13.18 +Version: 1.13.19 Release: 0 Summary: A RFC3261 compliant SIP User-Agent library License: LGPL-2.1-or-later ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.3SCezY/_old 2026-10-29 16:11:49.601866536 +0100 +++ /var/tmp/diff_new_pack.3SCezY/_new 2026-10-29 16:11:49.605866703 +0100 @@ -1,6 +1,7 @@ -mtime: 1787230743 -commit: c84652e2e757f6f83c7255258855d2b172f00ead0ed63d35d642f75c76a3bdfd +mtime: 1793175392 +commit: d6dd45f2e091a31c832b86734ae5b99bb303230f65723e1b6ae5ae0bff9245e1 url: https://src.opensuse.org/GNOME/sofia-sip -revision: c84652e2e757f6f83c7255258855d2b172f00ead0ed63d35d642f75c76a3bdfd +revision: d6dd45f2e091a31c832b86734ae5b99bb303230f65723e1b6ae5ae0bff9245e1 +trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ _service ++++++ --- /var/tmp/diff_new_pack.3SCezY/_old 2026-10-29 16:11:49.633867877 +0100 +++ /var/tmp/diff_new_pack.3SCezY/_new 2026-10-29 16:11:49.638868087 +0100 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://github.com/freeswitch/sofia-sip.git</param> - <param name="revision">v1.13.18</param> + <param name="revision">v1.13.19</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">v?(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-28 09:16:32.000000000 +0100 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ sofia-sip-1.13.18.tar.xz -> sofia-sip-1.13.19.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/.github/docker/debian/bullseye/amd64/Dockerfile new/sofia-sip-1.13.19/.github/docker/debian/bullseye/amd64/Dockerfile --- old/sofia-sip-1.13.18/.github/docker/debian/bullseye/amd64/Dockerfile 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/.github/docker/debian/bullseye/amd64/Dockerfile 1970-01-01 01:00:00.000000000 +0100 @@ -1,89 +0,0 @@ -ARG BUILDER_IMAGE=debian:bullseye-20240513 - -FROM ${BUILDER_IMAGE} AS builder - -ARG MAINTAINER_NAME="Andrey Volk" -ARG MAINTAINER_EMAIL="[email protected]" - -ARG CODENAME=bullseye -ARG ARCH=amd64 - -ARG BUILD_NUMBER=42 -ARG GIT_SHA=0000000000 - -ARG DATA_DIR=/data - -LABEL maintainer="${MAINTAINER_NAME} <${MAINTAINER_EMAIL}>" - -SHELL ["/bin/bash", "-c"] - -ENV DEBIAN_FRONTEND=noninteractive - -RUN apt-get -q update \ - && apt-get -y -q install \ - apt-transport-https \ - autoconf \ - automake \ - build-essential \ - ca-certificates \ - cmake \ - curl \ - debhelper \ - devscripts \ - dh-autoreconf \ - dos2unix \ - doxygen \ - dpkg-dev \ - git \ - graphviz \ - libglib2.0-dev \ - libssl-dev \ - lsb-release \ - pkg-config \ - wget - -RUN update-ca-certificates --fresh - -RUN echo "export CODENAME=${CODENAME}" | tee ~/.env \ - && echo "export ARCH=${ARCH}" | tee -a ~/.env \ - && chmod +x ~/.env - -RUN git config --global --add safe.directory '*' \ - && git config --global user.name "${MAINTAINER_NAME}" \ - && git config --global user.email "${MAINTAINER_EMAIL}" - -# Bootstrap and Build -COPY . ${DATA_DIR} -WORKDIR ${DATA_DIR} - -RUN echo "export VERSION=$(dpkg-parsechangelog --show-field Version | cut -f1 -d'-')" \ - | tee -a ~/.env - -RUN apt-get -q update \ - && mk-build-deps \ - --install \ - --remove debian/control \ - --tool "apt-get -y --no-install-recommends" \ - && apt-get -y -f install - -ENV DEB_BUILD_OPTIONS="parallel=1" - -RUN . ~/.env \ - && dch \ - --controlmaint \ - --distribution "${CODENAME}" \ - --force-bad-version \ - --force-distribution \ - --newversion "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \ - "Nightly build, ${GIT_SHA}" \ - && debuild \ - --no-tgz-check \ - --build=binary \ - --unsigned-source \ - --unsigned-changes \ - && mkdir OUT \ - && mv -v ../*.{deb,changes} OUT/. - -# Artifacts image (mandatory part, the resulting image must have a single filesystem layer) -FROM scratch -COPY --from=builder /data/OUT/ / diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/.github/docker/debian/bullseye/arm32v7/Dockerfile new/sofia-sip-1.13.19/.github/docker/debian/bullseye/arm32v7/Dockerfile --- old/sofia-sip-1.13.18/.github/docker/debian/bullseye/arm32v7/Dockerfile 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/.github/docker/debian/bullseye/arm32v7/Dockerfile 1970-01-01 01:00:00.000000000 +0100 @@ -1,89 +0,0 @@ -ARG BUILDER_IMAGE=arm32v7/debian:bullseye-20240513 - -FROM --platform=linux/arm/v7 ${BUILDER_IMAGE} AS builder - -ARG MAINTAINER_NAME="Andrey Volk" -ARG MAINTAINER_EMAIL="[email protected]" - -ARG CODENAME=bullseye -ARG ARCH=arm32 - -ARG BUILD_NUMBER=42 -ARG GIT_SHA=0000000000 - -ARG DATA_DIR=/data - -LABEL maintainer="${MAINTAINER_NAME} <${MAINTAINER_EMAIL}>" - -SHELL ["/bin/bash", "-c"] - -ENV DEBIAN_FRONTEND=noninteractive - -RUN apt-get -q update \ - && apt-get -y -q install \ - apt-transport-https \ - autoconf \ - automake \ - build-essential \ - ca-certificates \ - cmake \ - curl \ - debhelper \ - devscripts \ - dh-autoreconf \ - dos2unix \ - doxygen \ - dpkg-dev \ - git \ - graphviz \ - libglib2.0-dev \ - libssl-dev \ - lsb-release \ - pkg-config \ - wget - -RUN update-ca-certificates --fresh - -RUN echo "export CODENAME=${CODENAME}" | tee ~/.env \ - && echo "export ARCH=${ARCH}" | tee -a ~/.env \ - && chmod +x ~/.env - -RUN git config --global --add safe.directory '*' \ - && git config --global user.name "${MAINTAINER_NAME}" \ - && git config --global user.email "${MAINTAINER_EMAIL}" - -# Bootstrap and Build -COPY . ${DATA_DIR} -WORKDIR ${DATA_DIR} - -RUN echo "export VERSION=$(dpkg-parsechangelog --show-field Version | cut -f1 -d'-')" \ - | tee -a ~/.env - -RUN apt-get -q update \ - && mk-build-deps \ - --install \ - --remove debian/control \ - --tool "apt-get -y --no-install-recommends" \ - && apt-get -y -f install - -ENV DEB_BUILD_OPTIONS="parallel=1" - -RUN . ~/.env \ - && dch \ - --controlmaint \ - --distribution "${CODENAME}" \ - --force-bad-version \ - --force-distribution \ - --newversion "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \ - "Nightly build, ${GIT_SHA}" \ - && debuild \ - --no-tgz-check \ - --build=binary \ - --unsigned-source \ - --unsigned-changes \ - && mkdir OUT \ - && mv -v ../*.{deb,changes} OUT/. - -# Artifacts image (mandatory part, the resulting image must have a single filesystem layer) -FROM scratch -COPY --from=builder /data/OUT/ / diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/.github/docker/debian/bullseye/arm64v8/Dockerfile new/sofia-sip-1.13.19/.github/docker/debian/bullseye/arm64v8/Dockerfile --- old/sofia-sip-1.13.18/.github/docker/debian/bullseye/arm64v8/Dockerfile 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/.github/docker/debian/bullseye/arm64v8/Dockerfile 1970-01-01 01:00:00.000000000 +0100 @@ -1,89 +0,0 @@ -ARG BUILDER_IMAGE=arm64v8/debian:bullseye-20240513 - -FROM --platform=linux/arm64 ${BUILDER_IMAGE} AS builder - -ARG MAINTAINER_NAME="Andrey Volk" -ARG MAINTAINER_EMAIL="[email protected]" - -ARG CODENAME=bullseye -ARG ARCH=arm64 - -ARG BUILD_NUMBER=42 -ARG GIT_SHA=0000000000 - -ARG DATA_DIR=/data - -LABEL maintainer="${MAINTAINER_NAME} <${MAINTAINER_EMAIL}>" - -SHELL ["/bin/bash", "-c"] - -ENV DEBIAN_FRONTEND=noninteractive - -RUN apt-get -q update \ - && apt-get -y -q install \ - apt-transport-https \ - autoconf \ - automake \ - build-essential \ - ca-certificates \ - cmake \ - curl \ - debhelper \ - devscripts \ - dh-autoreconf \ - dos2unix \ - doxygen \ - dpkg-dev \ - git \ - graphviz \ - libglib2.0-dev \ - libssl-dev \ - lsb-release \ - pkg-config \ - wget - -RUN update-ca-certificates --fresh - -RUN echo "export CODENAME=${CODENAME}" | tee ~/.env \ - && echo "export ARCH=${ARCH}" | tee -a ~/.env \ - && chmod +x ~/.env - -RUN git config --global --add safe.directory '*' \ - && git config --global user.name "${MAINTAINER_NAME}" \ - && git config --global user.email "${MAINTAINER_EMAIL}" - -# Bootstrap and Build -COPY . ${DATA_DIR} -WORKDIR ${DATA_DIR} - -RUN echo "export VERSION=$(dpkg-parsechangelog --show-field Version | cut -f1 -d'-')" \ - | tee -a ~/.env - -RUN apt-get -q update \ - && mk-build-deps \ - --install \ - --remove debian/control \ - --tool "apt-get -y --no-install-recommends" \ - && apt-get -y -f install - -ENV DEB_BUILD_OPTIONS="parallel=1" - -RUN . ~/.env \ - && dch \ - --controlmaint \ - --distribution "${CODENAME}" \ - --force-bad-version \ - --force-distribution \ - --newversion "${VERSION}-${BUILD_NUMBER}-${GIT_SHA}~${CODENAME}" \ - "Nightly build, ${GIT_SHA}" \ - && debuild \ - --no-tgz-check \ - --build=binary \ - --unsigned-source \ - --unsigned-changes \ - && mkdir OUT \ - && mv -v ../*.{deb,changes} OUT/. - -# Artifacts image (mandatory part, the resulting image must have a single filesystem layer) -FROM scratch -COPY --from=builder /data/OUT/ / diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/.github/workflows/build.yml new/sofia-sip-1.13.19/.github/workflows/build.yml --- old/sofia-sip-1.13.18/.github/workflows/build.yml 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/.github/workflows/build.yml 2026-10-27 16:57:25.000000000 +0100 @@ -33,7 +33,6 @@ - debian version: - bookworm - - bullseye - trixie platform: - name: amd64 @@ -85,7 +84,6 @@ - debian version: - bookworm - - bullseye - trixie platform: - name: amd64 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/.update new/sofia-sip-1.13.19/.update --- old/sofia-sip-1.13.18/.update 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/.update 2026-10-27 16:57:25.000000000 +0100 @@ -1 +1 @@ -Mon Aug 03 21:04:40 UTC 2026 +Tue Oct 27 15:57:17 UTC 2026 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/configure.ac new/sofia-sip-1.13.19/configure.ac --- old/sofia-sip-1.13.18/configure.ac 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/configure.ac 2026-10-27 16:57:25.000000000 +0100 @@ -11,7 +11,7 @@ dnl --------------------------- dnl update both the version for AC_INIT and the LIBSOFIA_SIP_UA_MAJOR_MINOR -AC_INIT([sofia-sip], [1.13.18]) +AC_INIT([sofia-sip], [1.13.19]) CFLAGS="$CFLAGS $CONFIGURE_CFLAGS" CXXFLAGS="$CXXFLAGS $CONFIGURE_CXXFLAGS" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/debian/changelog new/sofia-sip-1.13.19/debian/changelog --- old/sofia-sip-1.13.18/debian/changelog 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/debian/changelog 2026-10-27 16:57:25.000000000 +0100 @@ -1,3 +1,9 @@ +sofia-sip (1.13.19-0) unstable; urgency=medium + + * New Release. + + -- FreeSWITCH Solutions <[email protected]> Tue, 27 Oct 2026 18:57:17 +0300 + sofia-sip (1.13.18-0) unstable; urgency=medium * New Release. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/libsofia-sip-ua/msg/msg_mime.c new/sofia-sip-1.13.19/libsofia-sip-ua/msg/msg_mime.c --- old/sofia-sip-1.13.18/libsofia-sip-ua/msg/msg_mime.c 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/libsofia-sip-ua/msg/msg_mime.c 2026-10-27 16:57:25.000000000 +0100 @@ -401,7 +401,7 @@ m = strlen(boundary) - 2, blen = m - 1; /* Find first delimiter */ - if (memcmp(boundary + 2, p, m - 2) == 0) + if (len >= m - 2 && memcmp(boundary + 2, p, m - 2) == 0) b = p, p = p + m - 2; else if ((p = memmem(p, len, boundary + 1, m - 1))) { if (p != pl->pl_data && p[-1] == '\r') diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/open_c/config.h.in new/sofia-sip-1.13.19/open_c/config.h.in --- old/sofia-sip-1.13.18/open_c/config.h.in 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/open_c/config.h.in 2026-10-27 16:57:25.000000000 +0100 @@ -382,13 +382,13 @@ #define PACKAGE_NAME "sofia-sip" /* Define to the full name and version of this package. */ -#define PACKAGE_STRING "sofia-sip 1.13.18work" +#define PACKAGE_STRING "sofia-sip 1.13.19work" /* Define to the one symbol short name of this package. */ #define PACKAGE_TARNAME "sofia-sip" /* Define to the version of this package. */ -#define PACKAGE_VERSION "1.13.18work" +#define PACKAGE_VERSION "1.13.19work" /* Define as the return type of signal handlers (`int' or `void'). */ #define RETSIGTYPE void @@ -408,7 +408,7 @@ #define TIME_WITH_SYS_TIME 1 /* Version number of package */ -#define VERSION "1.13.18work" +#define VERSION "1.13.19work" /* Define to 1 if your processor stores words with the most significant byte first (like Motorola and SPARC, unlike Intel and VAX). */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sofia-sip-1.13.18/sofia-sip.spec new/sofia-sip-1.13.19/sofia-sip.spec --- old/sofia-sip-1.13.18/sofia-sip.spec 2026-08-03 23:14:22.000000000 +0200 +++ new/sofia-sip-1.13.19/sofia-sip.spec 2026-10-27 16:57:25.000000000 +0100 @@ -1,5 +1,5 @@ Name: sofia-sip -Version: 1.13.18 +Version: 1.13.19 Release: 1%{?dist} Summary: Sofia SIP User-Agent library ++++++ sofia-sip.obsinfo ++++++ --- /var/tmp/diff_new_pack.3SCezY/_old 2026-10-29 16:11:50.367898661 +0100 +++ /var/tmp/diff_new_pack.3SCezY/_new 2026-10-29 16:11:50.375898996 +0100 @@ -1,5 +1,5 @@ name: sofia-sip -version: 1.13.18 -mtime: 1785791662 -commit: ad36ac8f755308e8b87f98a505e83d4e408e5cc3 +version: 1.13.19 +mtime: 1793116645 +commit: 6dce59d35535e6dd3945c7b0f76dbf1ba884202d
