Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mcphost for openSUSE:Factory checked in at 2026-07-24 22:06:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mcphost (Old) and /work/SRC/openSUSE:Factory/.mcphost.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mcphost" Fri Jul 24 22:06:47 2026 rev:12 rq:1367634 version:0.34.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mcphost/mcphost.changes 2026-06-01 18:08:54.538505642 +0200 +++ /work/SRC/openSUSE:Factory/.mcphost.new.2004/mcphost.changes 2026-07-24 22:07:18.605831358 +0200 @@ -1,0 +2,16 @@ +Thu Jul 23 15:50:00 UTC 2026 - Egbert Eich <[email protected]> + +- Update the golang.org/x/net dependency to version v0.57.0 + to fix CVE-2026-39821 for good (bsc#1266572). +- Fix GO-2026-5764: + DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder + in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream +- Fix CVE-2026-5160 (GO-2026-5320) (bsc#1272488): + Cross-site Scripting (XSS) in github.com/yuin/goldmark +- Fix CVE-2026-56852 (GO-2026-5970) (bsc#1272131): + A norm.Iter can enter an infinite loop when handling input + containing invalid UTF-8 bytes. +- Move vulncheck run into %install section. Running on stripped + binaires yields erroneous results. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mcphost.spec ++++++ --- /var/tmp/diff_new_pack.dt5Rna/_old 2026-07-24 22:07:19.957878563 +0200 +++ /var/tmp/diff_new_pack.dt5Rna/_new 2026-07-24 22:07:19.957878563 +0200 @@ -87,17 +87,21 @@ install -Dm 644 %{name}-autocomplete.bash %{buildroot}%{_datadir}/bash-completion/completions/%{name} install -Dm 644 %{name}-autocomplete.zsh %{buildroot}%{_datadir}/zsh/site-functions/_%{name} install -Dm 644 %{name}-autocomplete.fish %{buildroot}%{_datadir}/fish/completions/_%{name} - -%check -# execute the binary as a basic check -%{buildroot}/%{_bindir}/%{name} help %if %{with vulncheck} +status=0 +echo "VULNCHECK START ===================================================" for i in $(find %{buildroot} -executable -and -not -type d -and -not -name "*.debug" -and -not -name "*.so*"); do file $i | grep -q "^$i: ELF" || continue - govulncheck -mode=binary -db file:///usr/share/vulndb/ $i + govulncheck -mode=binary -db file:///usr/share/vulndb/ $i || status=$? done +echo "VULNCHECK END =====================================================" +[ $status -eq 0 ] || exit $status %endif +%check +# execute the binary as a basic check +%{buildroot}/%{_bindir}/%{name} help + %files %license LICENSE %{_bindir}/%{name} ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.dt5Rna/_old 2026-07-24 22:07:20.001880099 +0200 +++ /var/tmp/diff_new_pack.dt5Rna/_new 2026-07-24 22:07:20.005880239 +0200 @@ -1,5 +1,5 @@ -mtime: 1780317807 -commit: 9a74f094584b58857b640b2f35963ed59664d23e98f1a5518dddb69d0404dd01 +mtime: 1784881731 +commit: 260cd3e00b58c1db87f86bfe1a9a5b9c67a916ddd267c269fc4f6a7011bdd3ed url: https://src.opensuse.org/AI/mcphost revision: main ++++++ _service ++++++ --- /var/tmp/diff_new_pack.dt5Rna/_old 2026-07-24 22:07:20.049881775 +0200 +++ /var/tmp/diff_new_pack.dt5Rna/_new 2026-07-24 22:07:20.061882194 +0200 @@ -7,11 +7,20 @@ github.com/buger/jsonparser=github.com/buger/[email protected] </param> <param name="replace"> - golang.org/x/net=golang.org/x/[email protected] + golang.org/x/net=golang.org/x/[email protected] </param> <param name="replace"> golang.org/x/crypto=golang.org/x/[email protected] </param> + <param name="replace"> + github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream=github.com/aws/aws-sdk-go-v2/aws/protocol/[email protected] + </param> + <param name="replace"> + github.com/yuin/goldmark=github.com/yuin/[email protected] + </param> + <param name="replace"> + golang.org/x/text=golang.org/x/[email protected] + </param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-24 10:28:51.000000000 +0200 @@ -0,0 +1,4 @@ +*.obscpio +*.osc +_build.* +.pbuild ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/mcphost/vendor.tar.gz /work/SRC/openSUSE:Factory/.mcphost.new.2004/vendor.tar.gz differ: char 39, line 1
