Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package azure-storage-azcopy for
openSUSE:Factory checked in at 2026-05-28 23:12:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/azure-storage-azcopy (Old)
and /work/SRC/openSUSE:Factory/.azure-storage-azcopy.new.1937 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "azure-storage-azcopy"
Thu May 28 23:12:31 2026 rev:8 rq:1355663 version:10.32.4
Changes:
--------
---
/work/SRC/openSUSE:Factory/azure-storage-azcopy/azure-storage-azcopy.changes
2026-05-24 19:37:39.028186182 +0200
+++
/work/SRC/openSUSE:Factory/.azure-storage-azcopy.new.1937/azure-storage-azcopy.changes
2026-05-28 23:13:01.014058957 +0200
@@ -1,0 +2,20 @@
+Thu May 28 11:02:15 UTC 2026 - John Paul Adrian Glaubitz
<[email protected]>
+
+- Update to 10.32.4
+ * Remove 32-bit Windows ARM7 build
+ * Cover other open CVEs (bsc#1266657, CVE-2026-39821)
+ * Update otel sdk
+ * Update packages and add patch version
+- from version 10.32.3
+ * Update version.go
+ * Error formatting
+ * Add test to validate changes
+ * Update Changelog
+ * Alter intentional panics to return errors
+ * Correct issues re: MSRC case #110341
+ * Update offending packages
+- Drop CVE-2026-33186.patch, merged upstream
+- Drop CVE-2026-33814.patch, merged upstream
+- Drop CVE-2026-34986.patch, merged upstream
+
+-------------------------------------------------------------------
Old:
----
CVE-2026-33186.patch
CVE-2026-33814.patch
CVE-2026-34986.patch
azure-storage-azcopy-v10.32.2.tar.gz
New:
----
azure-storage-azcopy-v10.32.4.tar.gz
----------(Old B)----------
Old: * Update offending packages
- Drop CVE-2026-33186.patch, merged upstream
- Drop CVE-2026-33814.patch, merged upstream
Old:- Drop CVE-2026-33186.patch, merged upstream
- Drop CVE-2026-33814.patch, merged upstream
- Drop CVE-2026-34986.patch, merged upstream
Old:- Drop CVE-2026-33814.patch, merged upstream
- Drop CVE-2026-34986.patch, merged upstream
----------(Old E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ azure-storage-azcopy.spec ++++++
--- /var/tmp/diff_new_pack.rlbQAo/_old 2026-05-28 23:13:08.146352409 +0200
+++ /var/tmp/diff_new_pack.rlbQAo/_new 2026-05-28 23:13:08.146352409 +0200
@@ -23,7 +23,7 @@
%global import_path %{provider_prefix}
Name: azure-storage-azcopy
-Version: 10.32.2
+Version: 10.32.4
Release: 0
License: MIT
Summary: Microsoft Azure Storage data transfer utility
@@ -32,12 +32,6 @@
Source1: vendor.tar.gz
# PATCH-FIX-UPSTREAM - Add support for s390x architecture - gh/wastore/keyctl#2
Patch0: keyctl-add-s390x-support.patch
-# PATCH-FIX-UPSTREAM - grpc: enforce strict path checking for incoming
requests on the server
-Patch1: CVE-2026-33186.patch
-# PATCH-FIX-UPSTREAM - Fix crafted JWE input with a missing encrypted key can
lead to a denial of service
-Patch2: CVE-2026-34986.patch
-# PATCH-FIX-UPSTREAM - net: http2: prevent hanging Transport due to bad
SETTINGS frame
-Patch3: CVE-2026-33814.patch
BuildRequires: golang-packaging
BuildRequires: go >= 1.24
# Building with -buildmode=pie is currently unsupported on armv7l, i586,
riscv64 and s390x
@@ -56,15 +50,6 @@
pushd vendor/github.com/wastore/keyctl
%patch -P0 -p1
popd
-pushd vendor/google.golang.org/grpc
-%patch -P1 -p1
-popd
-pushd vendor/github.com/go-jose/go-jose/v4
-%patch -P2 -p1
-popd
-pushd vendor/golang.org/x/net
-%patch -P3 -p1
-popd
%build
%goprep %{import_path}
++++++ _service ++++++
--- /var/tmp/diff_new_pack.rlbQAo/_old 2026-05-28 23:13:08.198354548 +0200
+++ /var/tmp/diff_new_pack.rlbQAo/_new 2026-05-28 23:13:08.206354877 +0200
@@ -3,8 +3,8 @@
<param name="url">https://github.com/Azure/azure-storage-azcopy</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="versionformat">v10.32.2</param>
- <param name="revision">v10.32.2</param>
+ <param name="versionformat">v10.32.4</param>
+ <param name="revision">v10.32.4</param>
<param name="changesgenerate">disable</param>
</service>
<service name="recompress" mode="disabled">
@@ -15,7 +15,7 @@
<param name="basename">azure-storage-azcopy</param>
</service>
<service name="go_modules" mode="disabled">
- <param name="archive">azure-storage-azcopy-v10.32.2.tar.gz</param>
+ <param name="archive">azure-storage-azcopy-v10.32.4.tar.gz</param>
</service>
</services>
++++++ azure-storage-azcopy-v10.32.2.tar.gz ->
azure-storage-azcopy-v10.32.4.tar.gz ++++++
/work/SRC/openSUSE:Factory/azure-storage-azcopy/azure-storage-azcopy-v10.32.2.tar.gz
/work/SRC/openSUSE:Factory/.azure-storage-azcopy.new.1937/azure-storage-azcopy-v10.32.4.tar.gz
differ: char 12, line 1
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/azure-storage-azcopy/vendor.tar.gz
/work/SRC/openSUSE:Factory/.azure-storage-azcopy.new.1937/vendor.tar.gz differ:
char 13, line 1
