Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package git-bug for openSUSE:Factory checked in at 2026-09-08 17:14:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/git-bug (Old) and /work/SRC/openSUSE:Factory/.git-bug.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "git-bug" Tue Sep 8 17:14:59 2026 rev:17 rq:1376099 version:0.10.1 Changes: -------- --- /work/SRC/openSUSE:Factory/git-bug/git-bug.changes 2026-06-10 15:52:18.974637172 +0200 +++ /work/SRC/openSUSE:Factory/.git-bug.new.1265/git-bug.changes 2026-09-08 17:15:01.710392118 +0200 @@ -1,0 +2,13 @@ +Mon Sep 7 07:02:36 UTC 2026 - Matej Cepl <[email protected]> + +- CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: authentication + bypass and deadlocks in the crypto/ssh library (bsc#1278592), + revendoring to these packages: + - golang.org/x/[email protected] + - golang.org/x/[email protected] + - golang.org/x/[email protected] + - golang.org/x/[email protected] + - github.com/go-git/go-git/[email protected] + - golang.org/x/crypto/[email protected] + +------------------------------------------------------------------- @@ -90 +103 @@ - CPU time, possibly leading to denial of service. (bsc#1267196, + CPU time, possibly leading to denial of service. (bsc#1267157, ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.9cMfRB/_old 2026-09-08 17:15:03.346460162 +0200 +++ /var/tmp/diff_new_pack.9cMfRB/_new 2026-09-08 17:15:03.348460246 +0200 @@ -1,5 +1,5 @@ -mtime: 1781039327 -commit: eba7ab1a707960525ceb5060e81565c2cbee841a0d01f03badef5226467f5e00 +mtime: 1788765301 +commit: d87dd61b4cbb641fc2c79eed6b4f75e6a70a0855e1aa8666c0e60cad7dfed8c6 url: https://src.opensuse.org/mcepl/git-bug revision: factory ++++++ _service ++++++ --- /var/tmp/diff_new_pack.9cMfRB/_old 2026-09-08 17:15:03.373461285 +0200 +++ /var/tmp/diff_new_pack.9cMfRB/_new 2026-09-08 17:15:03.378461493 +0200 @@ -14,13 +14,16 @@ </service> <service name="set_version" mode="manual"/ --> <service name="go_modules" mode="manual"> - <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> + <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> + <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> + <param name="replace">golang.org/x/text=golang.org/x/[email protected]</param> + <param name="replace">golang.org/x/oauth=golang.org/x/[email protected]</param> <param name="replace">github.com/go-viper/mapstructure/v2=github.com/go-viper/mapstructure/[email protected]</param> + <!-- param name="replace">github.com/blevesearch/bleve=github.com/blevesearch/[email protected]</param --> <param name="replace">github.com/cloudflare/circl=github.com/cloudflare/[email protected]</param> - <param name="replace">github.com/go-git/go-git/v5=github.com/go-git/go-git/[email protected]</param> - <param name="replace">golang.org/x/crypto/ssh=golang.org/x/crypto/[email protected]</param> + <param name="replace">github.com/go-git/go-git/v5=github.com/go-git/go-git/[email protected]</param> + <param name="replace">golang.org/x/crypto/ssh=golang.org/x/crypto/[email protected]</param> <param name="replace">golang.org/x/crypto/ssh/agent=golang.org/x/crypto/ssh/[email protected]</param> - <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> <param name="replace">github.com/go-git/go-billy=github.com/go-git/go-billy/[email protected]</param> </service> </services> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-07 09:15:01.000000000 +0200 @@ -0,0 +1,10 @@ +_build.* +build.specials.obscpio +git-bug/ +*.obscpio +*.osc +.osc +.pbuild +_scmsync.obsinfo +_service:* +git-bug-*-build/ ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/git-bug/vendor.tar.gz /work/SRC/openSUSE:Factory/.git-bug.new.1265/vendor.tar.gz differ: char 137, line 2
