Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package ghc-crypton-x509-system for
openSUSE:Factory checked in at 2026-06-22 17:43:50
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ghc-crypton-x509-system (Old)
and /work/SRC/openSUSE:Factory/.ghc-crypton-x509-system.new.1956 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghc-crypton-x509-system"
Mon Jun 22 17:43:50 2026 rev:3 rq:1361095 version:1.9.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/ghc-crypton-x509-system/ghc-crypton-x509-system.changes
2026-06-10 15:59:55.885571265 +0200
+++
/work/SRC/openSUSE:Factory/.ghc-crypton-x509-system.new.1956/ghc-crypton-x509-system.changes
2026-06-22 17:44:20.249088519 +0200
@@ -1,0 +2,12 @@
+Sat Mar 7 03:33:56 UTC 2026 - Peter Simons <[email protected]>
+
+- Update crypton-x509-system to version 1.9.0.
+ * Fix CVE-2026-9648, bsc#1268157.
+ * Using "ram" instead of "memory".
+ * Depend indirectly on package `time-hourglass`, rather than `hourglass`.
Date
+ and time-related types and classes are now those from the former package.
+ * Depend indirectly on package `crypton-asn1-types >= 0.4.1` rather
+ than `asn1-types`. ASN.1-related types and classes are now those from the
+ former package.
+
+-------------------------------------------------------------------
Old:
----
crypton-x509-system-1.6.8.tar.gz
New:
----
crypton-x509-system-1.9.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ghc-crypton-x509-system.spec ++++++
--- /var/tmp/diff_new_pack.urA5fx/_old 2026-06-22 17:44:20.945112914 +0200
+++ /var/tmp/diff_new_pack.urA5fx/_new 2026-06-22 17:44:20.945112914 +0200
@@ -19,7 +19,7 @@
%global pkg_name crypton-x509-system
%global pkgver %{pkg_name}-%{version}
Name: ghc-%{pkg_name}
-Version: 1.6.8
+Version: 1.9.0
Release: 0
Summary: Handle per-operating-system X.509 accessors and storage
License: BSD-3-Clause
@@ -32,6 +32,8 @@
BuildRequires: ghc-bytestring-prof
BuildRequires: ghc-containers-devel
BuildRequires: ghc-containers-prof
+BuildRequires: ghc-crypton-pem-devel
+BuildRequires: ghc-crypton-pem-prof
BuildRequires: ghc-crypton-x509-devel
BuildRequires: ghc-crypton-x509-prof
BuildRequires: ghc-crypton-x509-store-devel
@@ -42,8 +44,6 @@
BuildRequires: ghc-filepath-prof
BuildRequires: ghc-mtl-devel
BuildRequires: ghc-mtl-prof
-BuildRequires: ghc-pem-devel
-BuildRequires: ghc-pem-prof
BuildRequires: ghc-process-devel
BuildRequires: ghc-process-prof
BuildRequires: ghc-rpm-macros
++++++ crypton-x509-system-1.6.8.tar.gz -> crypton-x509-system-1.9.0.tar.gz
++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/crypton-x509-system-1.6.8/ChangeLog.md
new/crypton-x509-system-1.9.0/ChangeLog.md
--- old/crypton-x509-system-1.6.8/ChangeLog.md 2001-09-09 03:46:40.000000000
+0200
+++ new/crypton-x509-system-1.9.0/ChangeLog.md 2001-09-09 03:46:40.000000000
+0200
@@ -1,5 +1,19 @@
# ChangeLog for crypton-x509-system
+## 1.9.0
+
+* Using "ram" instead of "memory"
+ [#29](https://github.com/kazu-yamamoto/crypton-certificate/pull/29)
+
+## 1.8.0
+
+* Depend indirectly on package `time-hourglass`, rather than `hourglass`. Date
+ and time-related types and classes are now those from the former package.
+ [#18](https://github.com/kazu-yamamoto/crypton-certificate/pull/18)
+* Depend indirectly on package `crypton-asn1-types >= 0.4.1` rather
+ than `asn1-types`. ASN.1-related types and classes are now those from the
+ former package.
+
## 1.6.8
* Prefer OpenSSL env vars: SSL_CERT_FILE and SSL_CERT_DIR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/crypton-x509-system-1.6.8/crypton-x509-system.cabal
new/crypton-x509-system-1.9.0/crypton-x509-system.cabal
--- old/crypton-x509-system-1.6.8/crypton-x509-system.cabal 2001-09-09
03:46:40.000000000 +0200
+++ new/crypton-x509-system-1.9.0/crypton-x509-system.cabal 2001-09-09
03:46:40.000000000 +0200
@@ -1,6 +1,6 @@
cabal-version: >=1.10
name: crypton-x509-system
-version: 1.6.8
+version: 1.9.0
license: BSD3
license-file: LICENSE
copyright: Vincent Hanquez <[email protected]>
@@ -38,9 +38,9 @@
directory,
filepath,
process,
- pem >=0.1 && <0.3,
- crypton-x509 >=1.6,
- crypton-x509-store >=1.6.2
+ crypton-pem >=0.2.4 && <0.4,
+ crypton-x509 >=1.9.0 && <1.10,
+ crypton-x509-store >=1.9.0 && <1.10
if os(windows)
exposed-modules: System.X509.Win32
@@ -48,7 +48,7 @@
extra-libraries: Crypt32
build-depends:
Win32,
- asn1-encoding
+ crypton-asn1-encoding
if os(osx)
cpp-options: -DMACOSX
