Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syncthing for openSUSE:Factory checked in at 2021-04-08 21:32:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syncthing (Old) and /work/SRC/openSUSE:Factory/.syncthing.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "syncthing" Thu Apr 8 21:32:11 2021 rev:104 rq:883633 version:1.15.1 Changes: -------- --- /work/SRC/openSUSE:Factory/syncthing/syncthing.changes 2021-03-03 18:35:49.795412231 +0100 +++ /work/SRC/openSUSE:Factory/.syncthing.new.2401/syncthing.changes 2021-04-08 21:32:18.847816910 +0200 @@ -1,0 +2,18 @@ +Wed Apr 7 10:43:16 UTC 2021 - Marius Kittler <marius.kitt...@suse.com> + +- Update to 1.15.0/1.15.1 + * This release fixes a vulnerability where Syncthing and the relay server + can crash due to malformed relay protocol messages (CVE-2021-21404); see + GHSA-x462-89pf-6r5h. (boo#1184428) + + * This release updates the CLI to use subcommands and adds the subcommands + cli (previously standalone stcli utility) and decrypt (for offline + verifying and decrypting encrypted folders). + + * With this release we invite everyone to test the "untrusted (encrypted) + devices" feature. You should not use it yet on important production + data. Thus UI controls are hidden behind a feature flag. For more + information, visit: + https://forum.syncthing.net/t/testing-untrusted-encrypted-devices/16470 + +------------------------------------------------------------------- Old: ---- syncthing-source-v1.14.0.tar.gz syncthing-source-v1.14.0.tar.gz.asc New: ---- syncthing-source-v1.15.1.tar.gz syncthing-source-v1.15.1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syncthing.spec ++++++ --- /var/tmp/diff_new_pack.pub5yv/_old 2021-04-08 21:32:19.523817652 +0200 +++ /var/tmp/diff_new_pack.pub5yv/_new 2021-04-08 21:32:19.527817657 +0200 @@ -17,7 +17,7 @@ Name: syncthing -Version: 1.14.0 +Version: 1.15.1 Release: 0 Summary: Continuous File Synchronisation License: MPL-2.0 @@ -63,8 +63,6 @@ export CGO_CPPFLAGS="${CPPFLAGS}" CGO_CFLAGS="${CFLAGS}" CGO_CXXFLAGS="${CXXFLAGS}" CGO_LDFLAGS="${LDFLAGS}" export GOFLAGS="-trimpath -mod=vendor" -# build and install stcli which has no dedicated target and can not be built with -no-upgrade -go run build.go -version v%{version} install all # build and install syncthing without automatic updates go run build.go -no-upgrade -version v%{version} install # build and install strelaysrv without automatic updates @@ -75,7 +73,6 @@ cd ../src/github.com/syncthing/%{name} mv LICENSE AUTHORS CONDUCT.md CONTRIBUTING.md README.md "$st_dir" install -Dpm 0755 bin/%{name} %{buildroot}%{_bindir}/%{name} -install -Dpm 0755 bin/stcli %{buildroot}%{_bindir}/stcli install -Dpm 0755 bin/strelaysrv %{buildroot}%{_bindir}/strelaysrv install -dm 0750 %{buildroot}/%{_localstatedir}/lib/strelaysrv install -Dpm 0644 cmd/strelaysrv/etc/linux-systemd/strelaysrv.service \ @@ -134,7 +131,6 @@ %license LICENSE %doc AUTHORS CONDUCT.md CONTRIBUTING.md README.md %{_bindir}/%{name} -%{_bindir}/stcli %{_unitdir}/%{name}@.service %{_unitdir}/%{name}-resume.service %if 0%{?suse_version} >= 1500 || 0%{?sle_version} > 120300 ++++++ syncthing-source-v1.14.0.tar.gz -> syncthing-source-v1.15.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/syncthing/syncthing-source-v1.14.0.tar.gz /work/SRC/openSUSE:Factory/.syncthing.new.2401/syncthing-source-v1.15.1.tar.gz differ: char 5, line 1
