Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tailscale for openSUSE:Factory checked in at 2025-03-28 07:36:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tailscale (Old) and /work/SRC/openSUSE:Factory/.tailscale.new.2696 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tailscale" Fri Mar 28 07:36:15 2025 rev:27 rq:1264694 version:1.82.0 Changes: -------- --- /work/SRC/openSUSE:Factory/tailscale/tailscale.changes 2025-03-12 20:13:54.940007917 +0100 +++ /work/SRC/openSUSE:Factory/.tailscale.new.2696/tailscale.changes 2025-03-28 07:36:17.124648698 +0100 @@ -1,0 +2,14 @@ +Thu Mar 27 19:50:58 UTC 2025 - Richard Rahl <rra...@opensuse.org> + +- update to 1.82.0: + * DERP functionality within the client supports certificate pinning for + self-signed IP address certificates for those unable to use Let's Encrypt + or WebPKI certificates. + * Go is updated to version 1.24.1 + * NAT traversal code uses the DERP connection that a packet arrived on as an + ultimate fallback route if no other information is available + * Captive portal detection reliability is improved on some in-flight Wi-Fi networks + * Port mapping success rate is improved + * Helsinki is added as a DERP region. + +------------------------------------------------------------------- Old: ---- tailscale-1.80.3.tar.gz New: ---- tailscale-1.82.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tailscale.spec ++++++ --- /var/tmp/diff_new_pack.hHIgTf/_old 2025-03-28 07:36:18.320697992 +0100 +++ /var/tmp/diff_new_pack.hHIgTf/_new 2025-03-28 07:36:18.320697992 +0100 @@ -17,7 +17,7 @@ Name: tailscale -Version: 1.80.3 +Version: 1.82.0 Release: 0 Summary: The easiest, most secure way to use WireGuard and 2FA License: BSD-3-Clause @@ -34,7 +34,7 @@ BuildRequires: git-core BuildRequires: golang-packaging BuildRequires: zsh -BuildRequires: golang(API) = 1.23 +BuildRequires: golang(API) >= 1.24 Requires: %{default_firewall_backend} ExcludeArch: i586 %{?systemd_requires} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.hHIgTf/_old 2025-03-28 07:36:18.372700135 +0100 +++ /var/tmp/diff_new_pack.hHIgTf/_new 2025-03-28 07:36:18.376700300 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/tailscale/tailscale.git</param> <param name="scm">git</param> <param name="package-meta">yes</param> - <param name="revision">refs/tags/v1.80.3</param> + <param name="revision">refs/tags/v1.82.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="changesgenerate">disable</param> ++++++ fix-CVE-2025-22869.patch ++++++ --- /var/tmp/diff_new_pack.hHIgTf/_old 2025-03-28 07:36:18.412701784 +0100 +++ /var/tmp/diff_new_pack.hHIgTf/_new 2025-03-28 07:36:18.416701949 +0100 @@ -1,47 +1,47 @@ -diff -rub tailscale-1.80.3/go.mod tailscale-1.80.3-patched/go.mod ---- tailscale-1.80.3/go.mod 2025-03-03 21:05:20.000000000 +0100 -+++ tailscale-1.80.3-patched/go.mod 2025-03-12 10:00:39.364237325 +0100 +diff -rub tailscale-1.82.0/go.mod tailscale-1.82.0-patched/go.mod +--- tailscale-1.82.0/go.mod 2025-03-26 20:26:55.000000000 +0100 ++++ tailscale-1.82.0-patched/go.mod 2025-03-26 22:23:51.011357984 +0100 @@ -94,14 +94,14 @@ go.uber.org/zap v1.27.0 go4.org/mem v0.0.0-20240501181205-ae6ca9944745 go4.org/netipx v0.0.0-20231129151722-fdeea329fbba -- golang.org/x/crypto v0.33.0 +- golang.org/x/crypto v0.35.0 + golang.org/x/crypto v0.36.0 - golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8 - golang.org/x/mod v0.22.0 - golang.org/x/net v0.35.0 - golang.org/x/oauth2 v0.25.0 + golang.org/x/exp v0.0.0-20250210185358-939b2ce775ac + golang.org/x/mod v0.23.0 + golang.org/x/net v0.36.0 + golang.org/x/oauth2 v0.26.0 - golang.org/x/sync v0.11.0 - golang.org/x/sys v0.30.0 - golang.org/x/term v0.29.0 + golang.org/x/sync v0.12.0 + golang.org/x/sys v0.31.0 + golang.org/x/term v0.30.0 - golang.org/x/time v0.9.0 - golang.org/x/tools v0.29.0 + golang.org/x/time v0.10.0 + golang.org/x/tools v0.30.0 golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 -@@ -385,7 +385,7 @@ +@@ -382,7 +382,7 @@ go.uber.org/multierr v1.11.0 // indirect golang.org/x/exp/typeparams v0.0.0-20240314144324-c7f7c6466f7f // indirect - golang.org/x/image v0.23.0 // indirect + golang.org/x/image v0.24.0 // indirect - golang.org/x/text v0.22.0 // indirect + golang.org/x/text v0.23.0 // indirect gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect google.golang.org/protobuf v1.35.1 // indirect gopkg.in/inf.v0 v0.9.1 // indirect -diff -rub tailscale-1.80.3/go.sum tailscale-1.80.3-patched/go.sum ---- tailscale-1.80.3/go.sum 2025-03-03 21:05:20.000000000 +0100 -+++ tailscale-1.80.3-patched/go.sum 2025-03-12 10:01:30.149309580 +0100 -@@ -1060,6 +1060,8 @@ +diff -rub tailscale-1.82.0/go.sum tailscale-1.82.0-patched/go.sum +--- tailscale-1.82.0/go.sum 2025-03-26 20:26:55.000000000 +0100 ++++ tailscale-1.82.0-patched/go.sum 2025-03-26 22:24:39.260395929 +0100 +@@ -1047,6 +1047,8 @@ golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= - golang.org/x/crypto v0.33.0 h1:IOBPskki6Lysi0lo9qQvbxiQ+FvsCC/YWOecCHAixus= - golang.org/x/crypto v0.33.0/go.mod h1:bVdXmD7IV/4GdElGPozy6U7lWdRXA4qyRVGJV57uQ5M= + golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs= + golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ= +golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34= +golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= -@@ -1173,6 +1175,8 @@ +@@ -1160,6 +1162,8 @@ golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w= golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= @@ -50,7 +50,7 @@ golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= -@@ -1233,6 +1237,8 @@ +@@ -1220,6 +1224,8 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc= golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= @@ -59,7 +59,7 @@ golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -@@ -1241,6 +1247,8 @@ +@@ -1228,6 +1234,8 @@ golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/term v0.29.0 h1:L6pJp37ocefwRRtYPKSWOWzOtWSxVajvz2ldH/xi3iU= golang.org/x/term v0.29.0/go.mod h1:6bl4lRlvVuDgSf3179VpIxBF0o10JUpXWOnI7nErv7s= @@ -68,7 +68,7 @@ golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= -@@ -1253,6 +1261,8 @@ +@@ -1240,6 +1248,8 @@ golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM= golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY= @@ -77,5 +77,5 @@ golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= -Only in tailscale-1.80.3-patched: vendor +Only in tailscale-1.82.0-patched: vendor ++++++ tailscale-1.80.3.tar.gz -> tailscale-1.82.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/tailscale/tailscale-1.80.3.tar.gz /work/SRC/openSUSE:Factory/.tailscale.new.2696/tailscale-1.82.0.tar.gz differ: char 12, line 1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/tailscale/vendor.tar.gz /work/SRC/openSUSE:Factory/.tailscale.new.2696/vendor.tar.gz differ: char 23, line 2