Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openbao for openSUSE:Factory checked in at 2026-10-02 23:06:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openbao (Old) and /work/SRC/openSUSE:Factory/.openbao.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openbao" Fri Oct 2 23:06:00 2026 rev:26 rq:1382111 version:2.6.4 Changes: -------- --- /work/SRC/openSUSE:Factory/openbao/openbao.changes 2026-09-24 23:01:08.089449541 +0200 +++ /work/SRC/openSUSE:Factory/.openbao.new.1631729/openbao.changes 2026-10-02 23:08:47.948012683 +0200 @@ -1,0 +2,30 @@ +Fri Oct 02 09:45:18 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 2.6.4: + * SECURITY + - core: Prevent disclosure of tls_acme_eab_mac_key from + sys/config/state/sanitized. GHSA-3237-j65r-m5rp. [GH-4148] + - core/audit: The unauthenticated "Root Token Generation" and + "Rekey" endpoints (which are disabled by default) returned + their response, even if audit logging failed. + GHSA-q74w-hv5x-6hxf. [GH-4148] + - auth/approle: Ensure Secret ID cannot be used for + authentication after expiration but before tidy is called. + GHSA-7m59-mp95-w6ph. [GH-4148] + - auth/approle: Fix incorrect JSON-decode path when parsing + login requests with form data bodies. GHSA-5v22-543h-wg96. + [GH-4148] + - auth/cert: Fix omission of TLS connection propagation when + calculating role-based quota. GHSA-5v22-543h-wg96. [GH-4148] + - auth/kubernetes: Ensure Service Account JWT is validated on + renewal, preventing post-revoke usage. GHSA-gf3j-hm38-jhh5. + [GH-4148] + * What's Changed + - Publish betas into testing RPM/DEB repos (#3385 in #4074 + - Bump ubi10-minimal from e3a5632 to 204e153 (#4129 in #4139 + - Bump github.com/hashicorp/cap from 0.13.0 to 0.14.0 (#4133 in + #4144 + - v2.7.1 - Security Fixes against release/v2.6.x (#4146 in + #4148 + +------------------------------------------------------------------- Old: ---- openbao-2.6.3.obscpio ui-2.6.3.tar.gz New: ---- openbao-2.6.4.obscpio ui-2.6.4.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openbao.spec ++++++ --- /var/tmp/diff_new_pack.jT2wyu/_old 2026-10-02 23:08:52.285193995 +0200 +++ /var/tmp/diff_new_pack.jT2wyu/_new 2026-10-02 23:08:52.287194079 +0200 @@ -23,7 +23,7 @@ %define short_executable_name bao Name: openbao -Version: 2.6.3 +Version: 2.6.4 Release: 0 Summary: Manage, store, and distribute sensitive data License: MPL-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.jT2wyu/_old 2026-10-02 23:08:52.388198301 +0200 +++ /var/tmp/diff_new_pack.jT2wyu/_new 2026-10-02 23:08:52.392198468 +0200 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/openbao/openbao.git</param> <param name="scm">git</param> - <param name="revision">refs/tags/v2.6.3</param> + <param name="revision">refs/tags/v2.6.4</param> <param name="package-meta">yes</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.jT2wyu/_old 2026-10-02 23:08:52.426199890 +0200 +++ /var/tmp/diff_new_pack.jT2wyu/_new 2026-10-02 23:08:52.430200057 +0200 @@ -3,6 +3,6 @@ <param name="url">https://github.com/openbao/openbao</param> <param name="changesrevision">028992583c693c4de6350b8aa52ff85e30375a99</param></service><service name="tar_scm"> <param name="url">https://github.com/openbao/openbao.git</param> - <param name="changesrevision">63a65e6b907589dbb952c371a70260a065bf8bd7</param></service></servicedata> + <param name="changesrevision">8206bc114009a0e468bbdae143f292922e1dbe27</param></service></servicedata> (No newline at EOF) ++++++ openbao-2.6.3.obscpio -> openbao-2.6.4.obscpio ++++++ /work/SRC/openSUSE:Factory/openbao/openbao-2.6.3.obscpio /work/SRC/openSUSE:Factory/.openbao.new.1631729/openbao-2.6.4.obscpio differ: char 50, line 1 ++++++ openbao.obsinfo ++++++ --- /var/tmp/diff_new_pack.jT2wyu/_old 2026-10-02 23:08:52.520203820 +0200 +++ /var/tmp/diff_new_pack.jT2wyu/_new 2026-10-02 23:08:52.529204196 +0200 @@ -1,5 +1,5 @@ name: openbao -version: 2.6.3 -mtime: 1790181473 -commit: 63a65e6b907589dbb952c371a70260a065bf8bd7 +version: 2.6.4 +mtime: 1790861551 +commit: 8206bc114009a0e468bbdae143f292922e1dbe27 ++++++ ui-2.6.3.tar.gz -> ui-2.6.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/openbao/ui-2.6.3.tar.gz /work/SRC/openSUSE:Factory/.openbao.new.1631729/ui-2.6.4.tar.gz differ: char 13, line 1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/openbao/vendor.tar.gz /work/SRC/openSUSE:Factory/.openbao.new.1631729/vendor.tar.gz differ: char 134, line 1
