Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package forgejo-cli for openSUSE:Factory checked in at 2026-08-17 17:00:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/forgejo-cli (Old) and /work/SRC/openSUSE:Factory/.forgejo-cli.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo-cli" Mon Aug 17 17:00:01 2026 rev:11 rq:1371569 version:0.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/forgejo-cli/forgejo-cli.changes 2026-07-26 11:31:18.656565274 +0200 +++ /work/SRC/openSUSE:Factory/.forgejo-cli.new.1258/forgejo-cli.changes 2026-08-17 17:06:44.412441294 +0200 @@ -1,0 +2,11 @@ +Mon Aug 17 07:18:23 UTC 2026 - Pavel Dostál <[email protected]> + +- Update vendored bytes crate to 1.12.1, fixing an integer overflow + in BytesMut::reserve that could corrupt the tracked capacity and + lead to out-of-bounds slices (boo#1274529, CVE-2026-25541, fixed + upstream in bytes 1.11.1). Refreshed Cargo.lock/vendor.tar.zst + together via the package's cargo_vendor service so both stay + consistent; also refreshed several other lockfile pins the service + had drifted from since the last update. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ Cargo.lock ++++++ ++++ 3880 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/forgejo-cli/Cargo.lock ++++ and /work/SRC/openSUSE:Factory/.forgejo-cli.new.1258/Cargo.lock ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/forgejo-cli/vendor.tar.zst /work/SRC/openSUSE:Factory/.forgejo-cli.new.1258/vendor.tar.zst differ: char 7, line 1
