Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apptainer for openSUSE:Factory checked in at 2026-05-23 23:25:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apptainer (Old) and /work/SRC/openSUSE:Factory/.apptainer.new.2084 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apptainer" Sat May 23 23:25:09 2026 rev:42 rq:1354775 version:1.4.5 Changes: -------- --- /work/SRC/openSUSE:Factory/apptainer/apptainer.changes 2026-05-06 19:21:14.013331675 +0200 +++ /work/SRC/openSUSE:Factory/.apptainer.new.2084/apptainer.changes 2026-05-23 23:27:12.052279827 +0200 @@ -1,0 +2,16 @@ +Fri May 22 16:04:43 UTC 2026 - Egbert Eich <[email protected]> + +- Fix CVE-2026-39827, CVE-2026-39834, CVE-2026-39828, CVE-2026-39829, + CVE-2026-39831, CVE-2026-42508, CVE-2026-39833, CVE-2026-39830, + CVE-2026-39832, CVE-2026-46597, CVE-2026-46598, CVE-2026-46595, + CVE-2026-39835 (bsc#1266202) + Update golang.org/x/crypto to v0.52.0 + +------------------------------------------------------------------- +Fri May 22 11:50:38 UTC 2026 - Egbert Eich <[email protected]> + +- Fix CVE-2026-33814 GO-2026-4918 (bsc#1265844) + Update golang.org/x/net to version v0.53.0 +- Integrate vulnchecker into %check stage (optional). + +------------------------------------------------------------------- @@ -23,0 +40,7 @@ + +------------------------------------------------------------------- +Thu Jan 29 13:12:31 UTC 2026 - Christian Goll <[email protected]> + +- Sync with Factory version which also fixes CVE-2024-45310 + tracked in bsc#1257432 +- Readded SLE-15SP6.def as it was removed from Factory New: ---- SLE-15SP6.def _scmsync.obsinfo build.specials.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apptainer.spec ++++++ --- /var/tmp/diff_new_pack.U4apPr/_old 2026-05-23 23:27:14.724388911 +0200 +++ /var/tmp/diff_new_pack.U4apPr/_new 2026-05-23 23:27:14.740389564 +0200 @@ -17,6 +17,7 @@ %{bcond_with suid} +%{bcond_with vulncheck} %define apptainerpath src/github.com/apptainer/ %define _buildshell /bin/bash @@ -38,8 +39,9 @@ Source0: https://github.com/apptainer/apptainer/archive/v%{version}%{?vers_suffix}/apptainer-%{version}%{?vers_suffix}.tar.gz Source1: README.SUSE Source2: SUSE.def -Source5: SLE-15SP7.def -Source6: SLE-16.def +Source6: SLE-15SP6.def +Source7: SLE-15SP7.def +Source8: SLE-16.def Source10: Leap.def Source20: %{name}-rpmlintrc Source21: vendor.tar.gz @@ -48,7 +50,7 @@ BuildRequires: gcc BuildRequires: git BuildRequires: go >= 1.19 -%if 0%{?install_vulncheck:1} +%if %{with vulncheck} BuildRequires: govulncheck BuildRequires: govulncheck-vulndb %endif @@ -85,6 +87,15 @@ This package contains the suid starter for Apptainer. Do not install unless this is absolutely needed! +%package sle15_6 +Summary: Apptainer Definition File Templates for SLE 15 SP6 +BuildArch: noarch +Requires: apptainer = %version + +%description sle15_6 +The package provides a definition file template for Apptainer containers +based on SUSE Linux Enterprise 15 SP6. + %package sle15_7 Summary: Apptainer Definition File Templates for SLE 15 SP7 BuildArch: noarch @@ -149,11 +160,20 @@ %make_install -C builddir V= install -d -m 0755 %{buildroot}/%{_datarootdir}/apptainer/templates -install -m 0644 %{S:2} %{S:5} %{S:6} %{S:10} %{buildroot}/%{_datarootdir}/apptainer/templates +install -m 0644 %{S:2} %{S:10} %{buildroot}/%{_datarootdir}/apptainer/templates +%{!?is_opensuse:install -m 0644 %{S:6} %{S:7} %{S:8} %{buildroot}/%{_datarootdir}/apptainer/templates} %fdupes apptainer/examples %fdupes -s %buildroot +%check +%if %{with vulncheck} +for i in $(find %{buildroot} -executable -and -not -type d -and -not -name "*.debug" -and -not -name "*.so*"); do + file $i | grep -q "^$i: ELF" || continue + govulncheck -mode=binary -db file:///usr/share/vulndb/ $i +done +%endif + %files %doc examples %doc CONTRIBUTING.md @@ -198,11 +218,16 @@ %{_libexecdir}/apptainer/bin/starter-suid %endif +%if 0%{!?is_opensuse:1} +%files sle15_6 +%{_datarootdir}/apptainer/templates/%{basename:%{S:6}} + %files sle15_7 -%{_datarootdir}/apptainer/templates/%{basename:%{S:5}} +%{_datarootdir}/apptainer/templates/%{basename:%{S:7}} %files sle16 -%{_datarootdir}/apptainer/templates/%{basename:%{S:6}} +%{_datarootdir}/apptainer/templates/%{basename:%{S:8}} +%endif %files leap %{_datarootdir}/apptainer/templates/%{basename:%{S:10}} ++++++ SLE-15SP6.def ++++++ -A https://api.suse.de cat -r 9 SLE-15SP6.def BootStrap: zypper OSVersion: 15.6 Include: zypper Product: SLES/15.6/x86_64 User: EMAIL Regcode: REGCODE MirrorURL: https://updates.suse.com/SUSE/Products/SLE-BCI/15-SP6/x86_64/product/ # Just base modules here, other modules are installed in post Modules: \n\ sle-module-basesystem,\n\ sle-module-server-applications ProductPGP:\n\ SLEpgp: -----BEGIN PGP PUBLIC KEY BLOCK-----\n\ Version: rpm-4.11.2 (NSS-3)\n\ \n\ mQENBFEKlmsBCADbpZZbbSC5Zi+HxCR/ynYsVxU5JNNiSSZabN5GMgc9Z0hxeXxp\n\ YWvFoE/4n0+IXIsp83iKvxf06Eu8je/DXp0lMqDZu7WiT3XXAlkOPSNV4akHTDoY\n\ 91SJaZCpgUJ7K1QXOPABNbREsAMN1a7rxBowjNjBUyiTJ2YuvQRLtGdK1kExsVma\n\ hieh/QxpoDyYd5w/aky3z23erCoEd+OPfAqEHd5tQIa6LOosa63BSCEl3milJ7J9\n\ vDmoGPAoS6ui7S2R5X4/+PLN8Mm2kOBrFjhmL93LX0mrGCMxsNsKgP6zabYKQEb8\n\ L028SXvl7EGoA+Vw5Vd3wIGbM73PfbgNrXjfABEBAAG0KFN1U0UgUGFja2FnZSBT\n\ aWduaW5nIEtleSA8YnVpbGRAc3VzZS5kZT6JATwEEwECACYCGwMGCwkIBwMCBBUC\n\ CAMEFgIDAQIeAQIXgAUCWEfrHwUJDsIitAAKCRBwr56BOdt8gpqUB/wPSSS5BcDu\n\ Oi4n02cj4Hdt7WITKBjjo0lG1fXG1ppx1wOST+s8FertMVFY53TW6FGjcYtwVOIq\n\ rsMYiV6kf1NxUV/jcAy7VmC5EZnO0R/D3sT4Oh5hsLtERauZolK5BZmd0S51Qa8e\n\ TxZ5mX9PL2i3s/ShETc30drf83ugc7B4yZPNQWXNDPgGcC+hEeC5qw48RzHYIpUt\n\ RzHmefR5Z3ioTUbDlzy+SGP2uA7mhR4Lfk/df5fYxWfCoKlyGjtrvA65cB+Pksyn\n\ xrAeBuB+vBM+KnDrxW2Sn4AbWkzH//dfz9OJDJu4UM91hb7qxM0OkrXHQV3iNqzg\n\ MDEhky/9NqMy\n\ =GdP5\n\ -----END PGP PUBLIC KEY BLOCK----- %post update-ca-certificates echo "Hello from post boot strap" zypper in -y vim ++++++ _scmsync.obsinfo ++++++ mtime: 1779467248 commit: 1225775c859fb566a06b933fdb3eab40eecdfdcd29c9a2c1282da257e248a3f5 url: https://src.opensuse.org/Cluster/apptainer.git ++++++ _service ++++++ --- /var/tmp/diff_new_pack.U4apPr/_old 2026-05-23 23:27:15.676427776 +0200 +++ /var/tmp/diff_new_pack.U4apPr/_new 2026-05-23 23:27:15.684428103 +0200 @@ -21,6 +21,12 @@ <param name="replace"> google.golang.org/grpc=google.golang.org/[email protected] </param> + <param name="replace"> + golang.org/x/net=golang.org/x/[email protected] + </param> + <param name="replace"> + golang.org/x/crypto=golang.org/x/[email protected] + </param> </service> </services> ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-05-22 18:27:28.000000000 +0200 @@ -0,0 +1,8 @@ +*.obscpio +*.osc +_build.* +.pbuild +*.obscpio +*.osc +_build.* +.pbuild ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/apptainer/vendor.tar.gz /work/SRC/openSUSE:Factory/.apptainer.new.2084/vendor.tar.gz differ: char 39, line 1
