Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package warewulf4 for openSUSE:Factory checked in at 2026-06-19 16:38:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/warewulf4 (Old) and /work/SRC/openSUSE:Factory/.warewulf4.new.1956 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "warewulf4" Fri Jun 19 16:38:17 2026 rev:41 rq:1360614 version:4.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/warewulf4/warewulf4.changes 2026-06-17 16:19:13.685344884 +0200 +++ /work/SRC/openSUSE:Factory/.warewulf4.new.1956/warewulf4.changes 2026-06-19 17:23:18.722072395 +0200 @@ -1,0 +2,6 @@ +Fri Jun 19 08:26:32 UTC 2026 - Christian Goll <[email protected]> + +- updated go-jose to fix CVE-2026-34986 (bsc#1262810) +- chi is fixed in the upstream project + +------------------------------------------------------------------- @@ -5,2 +11,2 @@ - * CVE-2026-39821 tracked at bsc#1266483 - * CVE-2026-33814 tracked at bsc#1265653 + * fixed CVE-2026-39821 (bsc#1266483) + * fixed CVE-2026-33814 (bsc#1265653) @@ -29 +35 @@ -- fix CVE-2025-69725 by updating chi +- fix CVE-2025-69725 (bsc#1258511) by updating chi ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ warewulf4.spec ++++++ --- /var/tmp/diff_new_pack.G3uTl8/_old 2026-06-19 17:23:22.586205578 +0200 +++ /var/tmp/diff_new_pack.G3uTl8/_new 2026-06-19 17:23:22.590205715 +0200 @@ -25,6 +25,12 @@ %else %define srcdir warewulf-%{version} %endif +%{bcond_with vulncheck} + +%if %{with vulncheck} +BuildRequires: govulncheck +BuildRequires: govulncheck-vulndb +%endif ExclusiveArch: x86_64 aarch64 @@ -221,6 +227,15 @@ # add version tag to documentation mv ./userdocs/_build/latex/warewulfuserguide.pdf ./userdocs/_build/latex/warewulfuserguide-%{version}.pdf +%check + +%if %{with vulncheck} +for i in $(find %{buildroot} -executable -and -not -type d -and -not -name "*.debug" -and -not -name "*.so*"); do + file $i | grep -q "^$i: ELF" || continue + govulncheck -mode=binary -db file:///usr/share/vulndb/ $i +done +%endif + %pre -f %{name}.pre %service_add_pre warewulfd.service ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.G3uTl8/_old 2026-06-19 17:23:22.666208335 +0200 +++ /var/tmp/diff_new_pack.G3uTl8/_new 2026-06-19 17:23:22.670208472 +0200 @@ -1,5 +1,5 @@ -mtime: 1781691015 -commit: edcbe227e30d033ac9ef4e720c65488d69e561e8da97c2e6ca253bea80950305 +mtime: 1781872793 +commit: 749fb5cb3be680096a91b116a0442fa3a7564616d6b93e6bc4c23b7f576e0559 url: https://src.opensuse.org/Cluster/warewulf4.git revision: main ++++++ _service ++++++ --- /var/tmp/diff_new_pack.G3uTl8/_old 2026-06-19 17:23:22.694209300 +0200 +++ /var/tmp/diff_new_pack.G3uTl8/_new 2026-06-19 17:23:22.698209438 +0200 @@ -1,7 +1,7 @@ <services> <service name="go_modules" mode="disabled"> <param name="replace"> - github.com/go-chi/chi/v5=github.com/go-chi/chi/[email protected] + github.com/go-jose/go-jose/v4=github.com/go-jose/go-jose/[email protected] </param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-06-19 14:39:53.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/warewulf4/vendor.tar.gz /work/SRC/openSUSE:Factory/.warewulf4.new.1956/vendor.tar.gz differ: char 9, line 1
