Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package git-bug for openSUSE:Factory checked in at 2026-05-18 17:47:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/git-bug (Old) and /work/SRC/openSUSE:Factory/.git-bug.new.1966 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "git-bug" Mon May 18 17:47:32 2026 rev:14 rq:1353788 version:0.10.1 Changes: -------- --- /work/SRC/openSUSE:Factory/git-bug/git-bug.changes 2025-11-26 17:16:06.207877395 +0100 +++ /work/SRC/openSUSE:Factory/.git-bug.new.1966/git-bug.changes 2026-05-18 17:48:20.537109713 +0200 @@ -1,0 +2,24 @@ +Mon May 18 06:30:04 UTC 2026 - Matej Cepl <[email protected]> + +- Fix CVE-2026-1229 and CVE-2026-41506 + - CVE-2026-1229: CIRCL has an incorrect calculation in + secp384r1 CombinedMult (bsc#1265416, GO-2026-4550) update + github.com/cloudflare/circl to v1.6.3 + - CVE-2026-41506: HTTP authentication credential leak when + following redirects during smart-HTTP clone and fetch + operations (bsc#1264955, GO-2026-4910), + update github.com/go-git/go-git/v5 to v5.17.1 + +------------------------------------------------------------------- +Mon May 18 06:30:04 UTC 2026 - Matej Cepl <[email protected]> + +- Fix CVE-2026-1229 and CVE-2026-41506 + - CVE-2026-1229: CIRCL has an incorrect calculation in + secp384r1 CombinedMult (GO-2026-4550) update + github.com/cloudflare/circl to v1.6.3 + - CVE-2026-41506: HTTP authentication credential leak when + following redirects during smart-HTTP clone and fetch + operations (bsc#1264955, GO-2026-4910), + update github.com/go-git/go-git/v5 to v5.17.1 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ git-bug.spec ++++++ --- /var/tmp/diff_new_pack.Sf8qgk/_old 2026-05-18 17:48:21.661156162 +0200 +++ /var/tmp/diff_new_pack.Sf8qgk/_new 2026-05-18 17:48:21.661156162 +0200 @@ -34,6 +34,7 @@ # Patch0: 501-export.patch BuildRequires: golang-packaging BuildRequires: git +BuildRequires: golang(API) = 1.22 %description git-bug is a bug tracker that: ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.Sf8qgk/_old 2026-05-18 17:48:21.705157980 +0200 +++ /var/tmp/diff_new_pack.Sf8qgk/_new 2026-05-18 17:48:21.713158310 +0200 @@ -1,5 +1,5 @@ -mtime: 1764093923 -commit: bfa8e9f39cf4935bee104b5cb556b8d9ab45d131ab1952423c3893b03c8ed4f8 +mtime: 1779102077 +commit: 6f40820460982b8bfb6d158b026abdef5db71b0f200472aa6889c72cddd3795e url: https://src.opensuse.org/mcepl/git-bug revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Sf8qgk/_old 2026-05-18 17:48:21.745159632 +0200 +++ /var/tmp/diff_new_pack.Sf8qgk/_new 2026-05-18 17:48:21.749159798 +0200 @@ -7,7 +7,8 @@ <param name="changesgenerate">enable</param> <param name="changesauthor">[email protected]</param> </service> - <service name="recompress" mode="manual"> + <service name="tar" mode="buildtime"/> + <service name="recompress" mode="buildtime"> <param name="file">*.tar</param> <param name="compression">gz</param> </service> @@ -15,7 +16,8 @@ <service name="go_modules" mode="manual"> <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> <param name="replace">github.com/go-viper/mapstructure/v2=github.com/go-viper/mapstructure/[email protected]</param> - <param name="replace">github.com/cloudflare/circl=github.com/cloudflare/[email protected]</param> + <param name="replace">github.com/cloudflare/circl=github.com/cloudflare/[email protected]</param> + <param name="replace">github.com/go-git/go-git/v5=github.com/go-git/go-git/[email protected]</param> <param name="replace">golang.org/x/crypto/ssh=golang.org/x/crypto/[email protected]</param> <param name="replace">golang.org/x/crypto/ssh/agent=golang.org/x/crypto/ssh/[email protected]</param> </service> ++++++ build.specials.obscpio ++++++ --- old/.gitignore 2025-11-25 19:05:59.000000000 +0100 +++ new/.gitignore 2026-05-18 13:01:17.000000000 +0200 @@ -1,6 +1,10 @@ -.osc -_scmsync.obsinfo +_build.* build.specials.obscpio git-bug/ -_buildconfig-* -_buildinfo-*.xml +*.obscpio +*.osc +.osc +.pbuild +_scmsync.obsinfo +_service:* +git-bug-*-build/ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-05-18 13:01:17.000000000 +0200 @@ -0,0 +1,10 @@ +_build.* +build.specials.obscpio +git-bug/ +*.obscpio +*.osc +.osc +.pbuild +_scmsync.obsinfo +_service:* +git-bug-*-build/ ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/git-bug/vendor.tar.gz /work/SRC/openSUSE:Factory/.git-bug.new.1966/vendor.tar.gz differ: char 136, line 2
