Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package framework-inputmodule-control for
openSUSE:Factory checked in at 2025-08-12 17:05:36
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/framework-inputmodule-control (Old)
and /work/SRC/openSUSE:Factory/.framework-inputmodule-control.new.1085
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "framework-inputmodule-control"
Tue Aug 12 17:05:36 2025 rev:3 rq:1299054 version:0.2.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/framework-inputmodule-control/framework-inputmodule-control.changes
2025-03-24 13:27:24.643695166 +0100
+++
/work/SRC/openSUSE:Factory/.framework-inputmodule-control.new.1085/framework-inputmodule-control.changes
2025-08-12 17:07:16.634034290 +0200
@@ -1,0 +2,8 @@
+Mon Aug 11 12:16:43 UTC 2025 - Nico Krapp <[email protected]>
+
+- Update vendor tarball to fix CVE-2023-53156 (bsc#1247082) and
+ CVE-2024-58266 (bsc#1247198)
+- Add update-toolchain.patch to update rust edition to 2024 to enable updates
+ of vendored crates
+
+-------------------------------------------------------------------
New:
----
update-toolchain.patch
----------(New B)----------
New: CVE-2024-58266 (bsc#1247198)
- Add update-toolchain.patch to update rust edition to 2024 to enable updates
of vendored crates
----------(New E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ framework-inputmodule-control.spec ++++++
--- /var/tmp/diff_new_pack.llhVIF/_old 2025-08-12 17:07:23.138305709 +0200
+++ /var/tmp/diff_new_pack.llhVIF/_new 2025-08-12 17:07:23.142305876 +0200
@@ -1,7 +1,7 @@
#
# spec file for package framework-inputmodule-control
#
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -26,6 +26,9 @@
URL: https://github.com/FrameworkComputer/inputmodule-rs
Source0:
https://github.com/FrameworkComputer/inputmodule-rs/archive/refs/tags/v%{version}.tar.gz#/%{shortname}-%{version}.tar.gz
Source1: vendor.tar.zst
+# PATCH-FIX-OPENSUSE update-toolchain.patch to update rust edition to 2024
+# to be able to update vendored dependencies
+Patch0: update-toolchain.patch
BuildRequires: cargo-packaging
BuildRequires: pkgconfig(libsystemd)
Recommends: framework-inputmodule-udev-rules
++++++ _service ++++++
--- /var/tmp/diff_new_pack.llhVIF/_old 2025-08-12 17:07:23.178307379 +0200
+++ /var/tmp/diff_new_pack.llhVIF/_new 2025-08-12 17:07:23.182307546 +0200
@@ -2,7 +2,7 @@
<service name="cargo_vendor" mode="disabled">
<param name="src">inputmodule-control-*.tar.gz</param>
<param name="cargotoml">inputmodule-control/Cargo.toml</param>
- <param name="update">false</param>
+ <param name="update">true</param>
</service>
</services>
++++++ update-toolchain.patch ++++++
Index: inputmodule-rs-0.2.0/rust-toolchain.toml
===================================================================
--- inputmodule-rs-0.2.0.orig/rust-toolchain.toml
+++ inputmodule-rs-0.2.0/rust-toolchain.toml
@@ -1,4 +1,4 @@
[toolchain]
-channel = "1.74.0"
+channel = "1.85.0"
targets = ["thumbv6m-none-eabi"]
components = ["clippy", "rustfmt"]
++++++ vendor.tar.zst ++++++
/work/SRC/openSUSE:Factory/framework-inputmodule-control/vendor.tar.zst
/work/SRC/openSUSE:Factory/.framework-inputmodule-control.new.1085/vendor.tar.zst
differ: char 7, line 1
