Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package keybase-client for openSUSE:Factory checked in at 2026-02-21 21:02:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/keybase-client (Old) and /work/SRC/openSUSE:Factory/.keybase-client.new.1977 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "keybase-client" Sat Feb 21 21:02:55 2026 rev:34 rq:1334244 version:6.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/keybase-client/keybase-client.changes 2025-11-24 14:13:58.405346460 +0100 +++ /work/SRC/openSUSE:Factory/.keybase-client.new.1977/keybase-client.changes 2026-02-21 21:05:13.372921720 +0100 @@ -1,0 +2,5 @@ +Fri Feb 20 19:58:37 UTC 2026 - Matthias Bach <[email protected]> + +- Add update-filippo.io-edwards25519.patch to address bsc#1258591. + +------------------------------------------------------------------- New: ---- update-filippo.io-edwards25519.patch ----------(New B)---------- New: - Add update-filippo.io-edwards25519.patch to address bsc#1258591. ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ keybase-client.spec ++++++ --- /var/tmp/diff_new_pack.TUyMtf/_old 2026-02-21 21:05:14.560970666 +0100 +++ /var/tmp/diff_new_pack.TUyMtf/_new 2026-02-21 21:05:14.560970666 +0100 @@ -1,7 +1,7 @@ # # spec file for package keybase-client # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC # Copyright (c) 2021 Matthias Bach <[email protected]> # # All modifications and additions to the file contributed by third parties @@ -33,6 +33,7 @@ Patch1: ensure-mount-dir-exists.patch Patch2: ensure-service-stop-unmounts-filesystem.patch Patch3: update-go-crypto.patch +Patch4: update-filippo.io-edwards25519.patch BuildRequires: fdupes BuildRequires: go1.24 BuildRequires: golang-packaging ++++++ update-filippo.io-edwards25519.patch ++++++ From: Matthias Bach <[email protected]> Date: Fri, 20 Feb 2026 20:41:25 +0100 Subject: Update filippo.io/edwards25519 for CVE-2026-26958 References: bsc#1258591 Upstream: never --- go/go.mod | 4 +++- go/go.sum | 2 ++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/go/go.mod b/go/go.mod index 42117bcc84..d7af03fb20 100644 --- a/go/go.mod +++ b/go/go.mod @@ -2,6 +2,8 @@ module github.com/keybase/client/go go 1.24.0 +toolchain go1.24.13 + require ( bazil.org/fuse v0.0.0-20200424023519-3c101025617f camlistore.org v0.0.0-20161205184337-c55c8602d3ce @@ -97,7 +99,7 @@ require ( require ( 4d63.com/gocheckcompilerdirectives v1.2.1 // indirect 4d63.com/gochecknoglobals v0.2.1 // indirect - filippo.io/edwards25519 v1.1.0 // indirect + filippo.io/edwards25519 v1.2.0 // indirect github.com/4meepo/tagalign v1.4.1 // indirect github.com/Abirdcfly/dupword v0.1.3 // indirect github.com/Antonboom/errname v1.0.0 // indirect diff --git a/go/go.sum b/go/go.sum index 83926ff9d9..4e403abc9f 100644 --- a/go/go.sum +++ b/go/go.sum @@ -37,6 +37,8 @@ cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU= filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= +filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo= +filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc= github.com/4meepo/tagalign v1.4.1 h1:GYTu2FaPGOGb/xJalcqHeD4il5BiCywyEYZOA55P6J4= github.com/4meepo/tagalign v1.4.1/go.mod h1:2H9Yu6sZ67hmuraFgfZkNcg5Py9Ch/Om9l2K/2W1qS4= github.com/Abirdcfly/dupword v0.1.3 h1:9Pa1NuAsZvpFPi9Pqkd93I7LIYRURj+A//dFd5tgBeE= -- 2.51.0 ++++++ vendor-6.5.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/keybase-client/vendor-6.5.1.tar.xz /work/SRC/openSUSE:Factory/.keybase-client.new.1977/vendor-6.5.1.tar.xz differ: char 27, line 1
