Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package velociraptor for openSUSE:Factory checked in at 2026-10-06 19:21:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/velociraptor (Old) and /work/SRC/openSUSE:Factory/.velociraptor.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "velociraptor" Tue Oct 6 19:21:30 2026 rev:26 rq:1382796 version:0.76.7.0.git145.b60ef1146 Changes: -------- --- /work/SRC/openSUSE:Factory/velociraptor/velociraptor.changes 2026-06-25 17:14:01.582822840 +0200 +++ /work/SRC/openSUSE:Factory/.velociraptor.new.3698736/velociraptor.changes 2026-10-06 19:21:46.100973384 +0200 @@ -1,0 +2,64 @@ +Tue Sep 22 09:57:15 UTC 2026 - Darragh O'Reilly <[email protected]> + +- Spec: fix build with go1.27 by not using json/v2. + * This is a temporary workaround until it's fixed upstream. + +- Spec: fix broken gui due to missing interactjs + * Remove --legacy-peer-deps argument to local-npm-registry. + +- Update to version 0.76.7.0.git145.b60ef1146: + * Update brace-expansion npm + Fixes CVE-2026-14257 (bsc#1272739) + * Update golang.org/x/text + Fixes CVE-2026-56852 (bsc#1272112) + * github: remove windows and update linux + * Don't create offline yaml tool dependencies + * Update golang.org/x/crypto + * Update github.com/cloudflare/circl + * Upgrade github.com/ProtonMail/gopenpgp to V3 + * Fix SshAuthorizedKeys artifact to work with v0.76 + * Fix services artifact systemctl show parse errors + * Fix artifacts for different VQL array() behaviour in v0.74+ + * Exclude velociraptor tracee ebpf from build + * Rebase onto upstream velociraptor v0.76.7 + https://github.com/Velocidex/velociraptor/releases#release-v0.76.7 + Fixes CVE-2025-0914 (bsc#1238058) + Fixes CVE-2026-5329 (bsc#1261858) + Fixes CVE-2026-6290 (bsc#1262261) + Fixes CVE-2026-6948 (bsc#1263858) + Fixes CVE-2026-7572 (bsc#1264226) + Fixes CVE-2026-7573 (bsc#1264227) + Fixes CVE-2026-6863 (bsc#1264363) + Fixes CVE-2026-18348 (bsc#1274823) + Fixes CVE-2026-18639 (bsc#1275078) + Fixes CVE-2026-17535 (bsc#1275251) + Fixes CVE-2026-18636 (bsc#1275254) + Fixes CVE-2026-18860 (bsc#1275255) + Fixes CVE-2026-18638 (bsc#1275274) + Fixes CVE-2026-64954 (bsc#1275282) + Fixes CVE-2026-64951 (bsc#1275284) + Fixes CVE-2026-64952 (bsc#1275285) + Fixes CVE-2026-27601 (bsc#1259158) + Fixes CVE-2026-29074 (bsc#1259301) + Fixes CVE-2026-41650 (bsc#1264489) + Fixes CVE-2026-53550 (bsc#1268809) + Fixes CVE-2026-12143 (bsc#1269804) + Fixes CVE-2026-59869 (bsc#1271385) + Fixes CVE-2026-49356 (bsc#1272334) + Fixes CVE-2026-55602 (bsc#1272338) + Fixes CVE-2026-45623 (bsc#1273226) + Fixes CVE-2026-65914 (bsc#1273396) + Fixes CVE-2026-65903 (bsc#1273396) + Fixes CVE-2026-65913 (bsc#1273396) + Fixes CVE-2026-65912 (bsc#1273396) + Fixes CVE-2026-67314 (bsc#1273632) + Fixes CVE-2026-67320 (bsc#1273723) + Fixes CVE-2026-73650 (bsc#1275327) + Fixes CVE-2026-73646 (bsc#1275889) + Fixes CVE-2026-69152 (bsc#1276024) + Fixes CVE-2026-73086 (bsc#1276036) + Fixes CVE-2026-69153 (bsc#1276138) + Fixes CVE-2026-84369 (bsc#1278278) + Fixes CVE-2026-84370 (bsc#1278285) + +------------------------------------------------------------------- Old: ---- velociraptor-0.7.0.4.git185.a5708584.obscpio New: ---- velociraptor-0.76.7.0.git145.b60ef1146.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ velociraptor.spec ++++++ --- /var/tmp/diff_new_pack.QRzyoE/_old 2026-10-06 19:21:50.448155426 +0200 +++ /var/tmp/diff_new_pack.QRzyoE/_new 2026-10-06 19:21:50.450155510 +0200 @@ -86,7 +86,7 @@ %endif Name: velociraptor%{name_suffix} -Version: 0.7.0.4.git185.a5708584 +Version: 0.76.7.0.git145.b60ef1146 Release: 0 %if %{build_server} Summary: Endpoint visibility and collection tool @@ -287,7 +287,7 @@ %if %{build_server} pushd gui/velociraptor rm -f package-lock.json -local-npm-registry %{_sourcedir} install --include=dev --legacy-peer-deps +local-npm-registry %{_sourcedir} install --include=dev popd %endif @@ -316,7 +316,7 @@ CLANG=clang -PATH=$PATH:/usr/sbin make %{make_target} BUILD_BPF_PLUGINS=%{with bpf} CLANG=$CLANG STRIP=$LLVM_STRIP +PATH=$PATH:/usr/sbin GOEXPERIMENT=nojsonv2 make %{make_target} BUILD_BPF_PLUGINS=%{with bpf} CLANG=$CLANG STRIP=$LLVM_STRIP %install install -D -d -m 0750 %buildroot/%{_sysconfdir}/velociraptor ++++++ _service ++++++ --- /var/tmp/diff_new_pack.QRzyoE/_old 2026-10-06 19:21:50.506157855 +0200 +++ /var/tmp/diff_new_pack.QRzyoE/_new 2026-10-06 19:21:50.509157981 +0200 @@ -3,9 +3,9 @@ <param name="url">https://github.com/SUSE/linux-security-sensor</param> <param name="filename">velociraptor</param> <param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param> - <param name="revision">sensor-base-0.7.0</param> + <param name="revision">sensor-base-0.76.7</param> <param name="scm">git</param> - <param name="parent-tag">sensor-base-0.7.0-4</param> + <param name="parent-tag">sensor-base-0.76.7-0</param> <param name="versionrewrite-pattern">sensor-base-([0-9\.]*)-([0-9]*)~(.*)</param> <param name="versionrewrite-replacement">\1.\2.\3</param> <param name="changesgenerate">enable</param> @@ -23,6 +23,7 @@ <param name="vendorname">velociraptor-go_modules</param> </service> <service mode="manual" name="node_modules"> + <param name="legacy-container"/> <param name="cpio">velociraptor-node_modules.obscpio</param> <param name="source-offset">10000</param> <param name="output">velociraptor-nodejs.spec.inc</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.QRzyoE/_old 2026-10-06 19:21:50.529158818 +0200 +++ /var/tmp/diff_new_pack.QRzyoE/_new 2026-10-06 19:21:50.532158944 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/SUSE/linux-security-sensor</param> - <param name="changesrevision">a5708584de05e0e7380972aa2314fd4ab87b5aaf</param></service></servicedata> + <param name="changesrevision">b60ef1146254c529b15280719dc2d0fa5199898e</param></service></servicedata> (No newline at EOF) ++++++ package-lock.json ++++++ ++++ 31722 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/velociraptor/package-lock.json ++++ and /work/SRC/openSUSE:Factory/.velociraptor.new.3698736/package-lock.json ++++++ velociraptor-0.7.0.4.git185.a5708584.obscpio -> velociraptor-0.76.7.0.git145.b60ef1146.obscpio ++++++ /work/SRC/openSUSE:Factory/velociraptor/velociraptor-0.7.0.4.git185.a5708584.obscpio /work/SRC/openSUSE:Factory/.velociraptor.new.3698736/velociraptor-0.76.7.0.git145.b60ef1146.obscpio differ: char 49, line 1 ++++++ velociraptor-go_modules.tar.gz ++++++ /work/SRC/openSUSE:Factory/velociraptor/velociraptor-go_modules.tar.gz /work/SRC/openSUSE:Factory/.velociraptor.new.3698736/velociraptor-go_modules.tar.gz differ: char 13, line 1 ++++++ velociraptor-node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/velociraptor/velociraptor-node_modules.obscpio /work/SRC/openSUSE:Factory/.velociraptor.new.3698736/velociraptor-node_modules.obscpio differ: char 58, line 1 ++++++ velociraptor-nodejs.spec.inc ++++++ ++++ 1880 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/velociraptor/velociraptor-nodejs.spec.inc ++++ and /work/SRC/openSUSE:Factory/.velociraptor.new.3698736/velociraptor-nodejs.spec.inc ++++++ velociraptor.obsinfo ++++++ --- /var/tmp/diff_new_pack.QRzyoE/_old 2026-10-06 19:21:50.899174313 +0200 +++ /var/tmp/diff_new_pack.QRzyoE/_new 2026-10-06 19:21:50.902174439 +0200 @@ -1,5 +1,5 @@ name: velociraptor -version: 0.7.0.4.git185.a5708584 -mtime: 1780582401 -commit: a5708584de05e0e7380972aa2314fd4ab87b5aaf +version: 0.76.7.0.git145.b60ef1146 +mtime: 1786633644 +commit: b60ef1146254c529b15280719dc2d0fa5199898e
