Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apptainer for openSUSE:Factory checked in at 2026-08-19 17:59:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apptainer (Old) and /work/SRC/openSUSE:Factory/.apptainer.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apptainer" Wed Aug 19 17:59:56 2026 rev:49 rq:1371956 version:1.5.3 Changes: -------- --- /work/SRC/openSUSE:Factory/apptainer/apptainer.changes 2026-07-26 11:33:02.144141901 +0200 +++ /work/SRC/openSUSE:Factory/.apptainer.new.1258/apptainer.changes 2026-08-19 18:02:17.257539142 +0200 @@ -1,0 +2,9 @@ +Wed Aug 19 09:53:14 UTC 2026 - Egbert Eich <[email protected]> + +- Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: + The tar extraction routines in moby/go-archive do not confine + filesystem operations to the destination directory. A crafted + archive can create or overwrite files outside the intended + destination (bsc#1275248). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.mrIR9u/_old 2026-08-19 18:02:19.088604922 +0200 +++ /var/tmp/diff_new_pack.mrIR9u/_new 2026-08-19 18:02:19.092605066 +0200 @@ -1,4 +1,4 @@ -mtime: 1785044455 -commit: 2545813e0691a23985fe7992708e8b894b5a3cc47d5611a43eaa471b41e91612 +mtime: 1787133445 +commit: 7ee46c7bd318402e47211aa59a9de65ccb26e8db1044256c35cdef7e47c19096 url: https://src.opensuse.org/Cluster/apptainer.git ++++++ _service ++++++ --- /var/tmp/diff_new_pack.mrIR9u/_old 2026-08-19 18:02:19.119606036 +0200 +++ /var/tmp/diff_new_pack.mrIR9u/_new 2026-08-19 18:02:19.122606143 +0200 @@ -3,6 +3,9 @@ <param name="replace"> golang.org/x/net=golang.org/x/[email protected] </param> + <param name="replace"> + github.com/moby/go-archive=github.com/moby/[email protected] + </param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-19 11:57:25.000000000 +0200 @@ -0,0 +1,8 @@ +*.obscpio +*.osc +_build.* +.pbuild +*.obscpio +*.osc +_build.* +.pbuild ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/apptainer/vendor.tar.gz /work/SRC/openSUSE:Factory/.apptainer.new.1258/vendor.tar.gz differ: char 15, line 1
