Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package ghc-crypton-x509-store for
openSUSE:Factory checked in at 2026-06-22 17:44:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/ghc-crypton-x509-store (Old)
and /work/SRC/openSUSE:Factory/.ghc-crypton-x509-store.new.1956 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ghc-crypton-x509-store"
Mon Jun 22 17:44:32 2026 rev:6 rq:1361118 version:1.9.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/ghc-crypton-x509-store/ghc-crypton-x509-store.changes
2026-06-10 15:59:51.685397208 +0200
+++
/work/SRC/openSUSE:Factory/.ghc-crypton-x509-store.new.1956/ghc-crypton-x509-store.changes
2026-06-22 17:45:04.842651482 +0200
@@ -1,0 +2,10 @@
+Sat Jun 7 03:31:56 UTC 2026 - Peter Simons <[email protected]>
+
+- Update crypton-x509-store to version 1.9.0.
+ * Fix CVE-2026-9648, bsc#1268157.
+ * Using "ram" instead of "memory".
+ * Depend on package `crypton-asn1-types >= 0.4.1` rather than `asn1-types`.
+ ASN.1-related types and classes are now those from the former package.
+ * Swap crypton-pem for existing unmaintained pem dependency.
+
+-------------------------------------------------------------------
Old:
----
crypton-x509-store-1.6.14.tar.gz
crypton-x509-store.cabal
New:
----
crypton-x509-store-1.9.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ ghc-crypton-x509-store.spec ++++++
--- /var/tmp/diff_new_pack.Tx7z6x/_old 2026-06-22 17:45:05.622678821 +0200
+++ /var/tmp/diff_new_pack.Tx7z6x/_new 2026-06-22 17:45:05.626678961 +0200
@@ -20,25 +20,26 @@
%global pkgver %{pkg_name}-%{version}
%bcond_with tests
Name: ghc-%{pkg_name}
-Version: 1.6.14
+Version: 1.9.0
Release: 0
Summary: X.509 collection accessing and storing methods
License: BSD-3-Clause
URL: https://hackage.haskell.org/package/%{pkg_name}
Source0:
https://hackage.haskell.org/package/%{pkg_name}-%{version}/%{pkg_name}-%{version}.tar.gz
-Source1:
https://hackage.haskell.org/package/%{pkg_name}-%{version}/revision/1.cabal#/%{pkg_name}.cabal
BuildRequires: ghc-Cabal-devel
-BuildRequires: ghc-asn1-encoding-devel
-BuildRequires: ghc-asn1-encoding-prof
-BuildRequires: ghc-asn1-types-devel
-BuildRequires: ghc-asn1-types-prof
BuildRequires: ghc-base-devel
BuildRequires: ghc-base-prof
BuildRequires: ghc-bytestring-devel
BuildRequires: ghc-bytestring-prof
BuildRequires: ghc-containers-devel
BuildRequires: ghc-containers-prof
+BuildRequires: ghc-crypton-asn1-encoding-devel
+BuildRequires: ghc-crypton-asn1-encoding-prof
+BuildRequires: ghc-crypton-asn1-types-devel
+BuildRequires: ghc-crypton-asn1-types-prof
BuildRequires: ghc-crypton-devel
+BuildRequires: ghc-crypton-pem-devel
+BuildRequires: ghc-crypton-pem-prof
BuildRequires: ghc-crypton-prof
BuildRequires: ghc-crypton-x509-devel
BuildRequires: ghc-crypton-x509-prof
@@ -48,8 +49,6 @@
BuildRequires: ghc-filepath-prof
BuildRequires: ghc-mtl-devel
BuildRequires: ghc-mtl-prof
-BuildRequires: ghc-pem-devel
-BuildRequires: ghc-pem-prof
BuildRequires: ghc-rpm-macros
BuildRequires: ghc-unix-devel
BuildRequires: ghc-unix-prof
@@ -94,7 +93,6 @@
%prep
%autosetup -n %{pkg_name}-%{version}
-cp -p %{SOURCE1} %{pkg_name}.cabal
%build
%ghc_lib_build
++++++ crypton-x509-store-1.6.14.tar.gz -> crypton-x509-store-1.9.0.tar.gz
++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/crypton-x509-store-1.6.14/ChangeLog.md
new/crypton-x509-store-1.9.0/ChangeLog.md
--- old/crypton-x509-store-1.6.14/ChangeLog.md 2001-09-09 03:46:40.000000000
+0200
+++ new/crypton-x509-store-1.9.0/ChangeLog.md 2001-09-09 03:46:40.000000000
+0200
@@ -1,11 +1,24 @@
# ChangeLog for crypton-x509-store
-## 1.6.14
+## 1.9.0
-* Recovering build on Windows.
- [#27](https://github.com/kazu-yamamoto/crypton-certificate/pull/27)
+* Using "ram" instead of "memory"
+ [#29](https://github.com/kazu-yamamoto/crypton-certificate/pull/29)
-## 1.6.13
+## v1.8.0
+
+* Depend on package `crypton-asn1-types >= 0.4.1` rather than `asn1-types`.
+ ASN.1-related types and classes are now those from the former package.
+ [#18](https://github.com/kazu-yamamoto/crypton-certificate/pull/18)
+* Swap crypton-pem for existing unmaintained pem dependency.
+ [#16](https://github.com/kazu-yamamoto/crypton-certificate/pull/16)
+
+## v1.6.14
+
+* Defining MIN_VERSION_unix if not defined.
+ [#27](https://github.com/kazu-yamamoto/crypton-certificate/issues/27)
+
+## v1.6.13
* Making buildable with ghc-9.4 and ghc-9.2.
[#23](https://github.com/kazu-yamamoto/crypton-certificate/pull/23)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/crypton-x509-store-1.6.14/crypton-x509-store.cabal
new/crypton-x509-store-1.9.0/crypton-x509-store.cabal
--- old/crypton-x509-store-1.6.14/crypton-x509-store.cabal 2001-09-09
03:46:40.000000000 +0200
+++ new/crypton-x509-store-1.9.0/crypton-x509-store.cabal 2001-09-09
03:46:40.000000000 +0200
@@ -1,6 +1,6 @@
cabal-version: >=1.10
name: crypton-x509-store
-version: 1.6.14
+version: 1.9.0
license: BSD3
license-file: LICENSE
copyright: Vincent Hanquez <[email protected]>
@@ -32,15 +32,15 @@
build-depends:
base >=3 && <5,
bytestring,
- mtl,
containers,
+ crypton >=1.1.0 && < 1.2,
+ crypton-asn1-encoding >=0.10.0 && <0.11,
+ crypton-asn1-types >=0.4.1 && <0.5,
+ crypton-pem >=0.2.4 && <0.4,
+ crypton-x509 >=1.9.0 && <1.10,
directory,
filepath,
- pem >=0.1 && <0.3,
- asn1-types >=0.3 && <0.4,
- asn1-encoding >=0.9 && <0.10,
- crypton,
- crypton-x509 >=1.7.2
+ mtl
if !os(windows)
build-depends: unix
