Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package goshs for openSUSE:Factory checked in at 2026-09-29 17:48:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/goshs (Old) and /work/SRC/openSUSE:Factory/.goshs.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "goshs" Tue Sep 29 17:48:52 2026 rev:17 rq:1381151 version:2.1.7 Changes: -------- --- /work/SRC/openSUSE:Factory/goshs/goshs.changes 2026-09-04 12:39:35.104846097 +0200 +++ /work/SRC/openSUSE:Factory/.goshs.new.383539/goshs.changes 2026-09-29 17:49:47.472232888 +0200 @@ -1,0 +2,19 @@ +Mon Sep 28 12:11:03 UTC 2026 - Martin Hauke <[email protected]> + +- Update to version 2.1.7 + Security + * Per-folder .goshs ACL now enforced on every protocol. + + SFTP ignores the .goshs ACL (GHSA-2m7f-jq4x-rcj7) + + TFTP, FTP and SMB ignore the .goshs ACL (GHSA-q8gg-q2wc-w52g) + + A directory named .goshs wipes inherited auth + (GHSA-mhxc-hfx2-7w79). + + Block list bypass on case-insensitive filesystems + (GHSA-3x28-6v7h-gg87). + + Concurrent requests bypass the brute-force lockout + (GHSA-8f9w-966j-qhq9). + New Features + * Folder upload in the web UI (#227). + Bug Fixes + * FTP crashed on AUTH TLS without TLS (nil-pointer panic). + +------------------------------------------------------------------- Old: ---- goshs-2.1.6.tar.gz New: ---- goshs-2.1.7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ goshs.spec ++++++ --- /var/tmp/diff_new_pack.BXD9Y6/_old 2026-09-29 17:49:51.060382913 +0200 +++ /var/tmp/diff_new_pack.BXD9Y6/_new 2026-09-29 17:49:51.063383039 +0200 @@ -16,7 +16,7 @@ # Name: goshs -Version: 2.1.6 +Version: 2.1.7 Release: 0 Summary: A simple HTTP server License: MIT ++++++ goshs-2.1.6.tar.gz -> goshs-2.1.7.tar.gz ++++++ ++++ 2901 lines of diff (skipped) ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/goshs/vendor.tar.gz /work/SRC/openSUSE:Factory/.goshs.new.383539/vendor.tar.gz differ: char 30, line 1
