Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package git-bug for openSUSE:Factory checked in at 2025-11-26 17:15:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/git-bug (Old) and /work/SRC/openSUSE:Factory/.git-bug.new.14147 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "git-bug" Wed Nov 26 17:15:50 2025 rev:13 rq:1320059 version:0.10.1 Changes: -------- --- /work/SRC/openSUSE:Factory/git-bug/git-bug.changes 2025-10-21 11:19:40.751012306 +0200 +++ /work/SRC/openSUSE:Factory/.git-bug.new.14147/git-bug.changes 2025-11-26 17:16:06.207877395 +0100 @@ -1,0 +2,16 @@ +Tue Nov 25 17:41:00 UTC 2025 - Matej Cepl <[email protected]> + +- Revendor to include fixed version of depending libraries: + - GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade + golang.org/x/crypto to v0.43.0 + - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrade + github.com/go-viper/mapstructure/v2 to v2.4.0 + - GO-2025-3787 (GHSA-fv92-fjc5-jj9h) included in the previous + - GO-2025-3754 (GHSA-2x5j-vhc8-9cwm) upgrade + github.com/cloudflare/circl to v1.6.1 + - GO-2025-4134 (CVE-2025-58181, bsc#1253930) upgrade + golang.org/x/crypto/ssh to v0.45.0 + - GO-2025-4135 (CVE-2025-47914, bsc#1254084) upgrade + golang.org/x/crypto/ssh/agent to v0.45.0 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.HeMaAV/_old 2025-11-26 17:16:06.987910302 +0100 +++ /var/tmp/diff_new_pack.HeMaAV/_new 2025-11-26 17:16:06.991910471 +0100 @@ -1,5 +1,5 @@ -mtime: 1761006338 -commit: fc67d2471d040d2c89d7cf0c36806dff775021cde0f0d8b8fbfb326312705d9b +mtime: 1764093923 +commit: bfa8e9f39cf4935bee104b5cb556b8d9ab45d131ab1952423c3893b03c8ed4f8 url: https://src.opensuse.org/mcepl/git-bug revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.HeMaAV/_old 2025-11-26 17:16:07.015911483 +0100 +++ /var/tmp/diff_new_pack.HeMaAV/_new 2025-11-26 17:16:07.019911652 +0100 @@ -12,6 +12,12 @@ <param name="compression">gz</param> </service> <service name="set_version" mode="manual"/ --> - <service name="go_modules" mode="manual"/> + <service name="go_modules" mode="manual"> + <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> + <param name="replace">github.com/go-viper/mapstructure/v2=github.com/go-viper/mapstructure/[email protected]</param> + <param name="replace">github.com/cloudflare/circl=github.com/cloudflare/[email protected]</param> + <param name="replace">golang.org/x/crypto/ssh=golang.org/x/crypto/[email protected]</param> + <param name="replace">golang.org/x/crypto/ssh/agent=golang.org/x/crypto/ssh/[email protected]</param> + </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2025-11-25 19:05:59.000000000 +0100 @@ -0,0 +1,6 @@ +.osc +_scmsync.obsinfo +build.specials.obscpio +git-bug/ +_buildconfig-* +_buildinfo-*.xml ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/git-bug/vendor.tar.gz /work/SRC/openSUSE:Factory/.git-bug.new.14147/vendor.tar.gz differ: char 14, line 1
