Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sccache for openSUSE:Factory checked in at 2026-08-14 22:05:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sccache (Old) and /work/SRC/openSUSE:Factory/.sccache.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sccache" Fri Aug 14 22:05:36 2026 rev:55 rq:1370930 version:0.17.0~1 Changes: -------- --- /work/SRC/openSUSE:Factory/sccache/sccache.changes 2026-07-31 16:10:23.550868524 +0200 +++ /work/SRC/openSUSE:Factory/.sccache.new.1258/sccache.changes 2026-08-14 22:05:49.614531141 +0200 @@ -1,0 +2,9 @@ +Thu Aug 13 04:14:42 UTC 2026 - William Brown <[email protected]> + +- bsc#1274146 - CVE-2026-25541 - integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes +- bsc#1273881 - CVE-2026-66746 - rouille: HTTP Response Splitting via Unvalidated Response Header Values +- bsc#1273888 - CVE-2026-67182 - rouille: HTTP Request Smuggling Enables Front-End Access Control Bypass +- bsc#1273886 - CVE-2026-67181 - rouille: HTTP Request Smuggling via Transfer-Encoding Desynchronization +- bsc#1273884 - CVE-2026-66754 - rouille: remove_prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/sccache/vendor.tar.zst /work/SRC/openSUSE:Factory/.sccache.new.1258/vendor.tar.zst differ: char 7, line 1
