Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package percona-toolkit for openSUSE:Factory
checked in at 2026-10-17 21:27:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/percona-toolkit (Old)
and /work/SRC/openSUSE:Factory/.percona-toolkit.new.3698736 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "percona-toolkit"
Sat Oct 17 21:27:32 2026 rev:43 rq:1385526 version:3.7.1.4
Changes:
--------
--- /work/SRC/openSUSE:Factory/percona-toolkit/percona-toolkit.changes
2026-06-22 17:25:35.041688354 +0200
+++
/work/SRC/openSUSE:Factory/.percona-toolkit.new.3698736/percona-toolkit.changes
2026-10-17 21:27:43.095679129 +0200
@@ -1,0 +2,31 @@
+Sat Oct 17 15:34:33 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to 3.7.1-4 (packaged as 3.7.1.4, RPM forbids '-' in
+ Version):
+ * Go library security refresh (PT-2546): CVE-2026-25680,
+ CVE-2026-25681, CVE-2026-27136, CVE-2026-33811,
+ CVE-2026-39820, CVE-2026-39827, CVE-2026-39828,
+ CVE-2026-39829, CVE-2026-39830, CVE-2026-39832,
+ CVE-2026-39835, CVE-2026-39836, CVE-2026-42499,
+ CVE-2026-42502, CVE-2026-42504, CVE-2026-42508,
+ CVE-2026-46595, CVE-2026-46597
+ * CVE-2026-39821: golang.org/x/net/idna ASCII-only Punycode
+ validation bypass via vendored x/net 0.53.0 -> 0.55.0
+ (boo#1266791)
+ * The shipped vendor tree is not affected by CVE-2026-33814
+ (boo#1265917): x/net 0.53.0 already carries the upstream
+ SETTINGS-frame guard
+ * The shipped vendor tree is not affected by CVE-2022-28948
+ (boo#1248544): vendored gopkg.in/yaml.v3 is 3.0.1, the fixed
+ version
+ * Replace data-dir validation logic in pt-online-schema-change
+ * Build Go tools against the vendored module tree, drop the
+ network-dependent `go get` step (offline builds)
+ * Drop the redundant ELF-binary copy from %install: upstream
+ installs the Go tools into INST_BIN itself now
+- Drop the x/net v0.53.0 replace pin from _service: upstream now
+ requires x/net v0.55.0 itself, the override would downgrade it
+- Refresh vendor.tar.zst, percona-toolkit-3.7.1.tar.gz replaced
+ by percona-toolkit-3.7.1-4.tar.gz, rebase go-build.patch
+
+-------------------------------------------------------------------
Old:
----
percona-toolkit-3.7.1.tar.gz
New:
----
percona-toolkit-3.7.1-4.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ percona-toolkit.spec ++++++
--- /var/tmp/diff_new_pack.oW5QCF/_old 2026-10-17 21:27:43.934714183 +0200
+++ /var/tmp/diff_new_pack.oW5QCF/_new 2026-10-17 21:27:43.936714266 +0200
@@ -16,20 +16,22 @@
#
-%define revision v%{version}
-
+%define upstream_version 3.7.1-4
+%define revision v%{upstream_version}
Name: percona-toolkit
-Version: 3.7.1
+Version: 3.7.1.4
Release: 0
Summary: Advanced MySQL and system command-line tools
License: GPL-2.0-only
-Group: Productivity/Databases/Tools
URL: https://www.percona.com/software/percona-toolkit/
-Source:
https://github.com/percona/percona-toolkit/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+Source:
https://github.com/percona/percona-toolkit/archive/refs/tags/v%{upstream_version}.tar.gz#/%{name}-%{upstream_version}.tar.gz
Source1: vendor.tar.zst
Source2: %{name}.conf
Source9: series
Patch1: go-build.patch
+BuildRequires: golang-packaging
+BuildRequires: zstd
+BuildRequires: golang(API)
BuildRequires: perl(DBD::mysql) >= 3
BuildRequires: perl(DBI) >= 1.46
BuildRequires: perl(IO::Socket::SSL)
@@ -42,9 +44,6 @@
Requires: perl(Time::HiRes)
Provides: maatkit = 7410.%{version}
Obsoletes: maatkit < 7410
-BuildRequires: golang-packaging
-BuildRequires: zstd
-BuildRequires: golang(API)
%{perl_requires}
%description
@@ -64,14 +63,14 @@
This collection was formerly known as Maatkit.
%prep
-%autosetup -p1 -a 1
+%autosetup -p1 -n %{name}-%{upstream_version} -a 1
%build
perl Makefile.PL INSTALLDIRS=vendor < /dev/null
sed -i 's|%{_bindir}/env perl|%{_bindir}/perl|' bin/*
sed -i 's|%{_bindir}/env bash|%{_bindir}/bash|' bin/*
%make_build \
- VERSION=%{version} \
+ VERSION=%{upstream_version} \
BUILD_DATE=$(date -u '+%FT%T%z' -d @${SOURCE_DATE_EPOCH}) \
COMMIT=%{revision} \
V=1
@@ -86,7 +85,6 @@
# a blank configuration file
mkdir -p %{buildroot}%{_sysconfdir}/%{name}
cp %{SOURCE2} %{buildroot}%{_sysconfdir}/%{name}/
-cp -a $(file bin/* | awk -F ':' '/ELF/ {print $1}') %{buildroot}%{_bindir}/
%files
%license COPYING
++++++ _service ++++++
--- /var/tmp/diff_new_pack.oW5QCF/_old 2026-10-17 21:27:43.984716272 +0200
+++ /var/tmp/diff_new_pack.oW5QCF/_new 2026-10-17 21:27:43.988716439 +0200
@@ -4,9 +4,6 @@
<service name="go_modules" mode="manual">
<param name="archive">*.tar.gz</param>
<param name="compression">zst</param>
- <param name="replace">
- golang.org/x/net=golang.org/x/[email protected]
- </param>
</service>
</services>
++++++ go-build.patch ++++++
--- /var/tmp/diff_new_pack.oW5QCF/_old 2026-10-17 21:27:44.004717108 +0200
+++ /var/tmp/diff_new_pack.oW5QCF/_new 2026-10-17 21:27:44.008717275 +0200
@@ -1,8 +1,22 @@
-Index: percona-toolkit-3.7.1/src/go/Makefile
+Index: percona-toolkit-3.7.1-4/Makefile.PL
===================================================================
---- percona-toolkit-3.7.1.orig/src/go/Makefile
-+++ percona-toolkit-3.7.1/src/go/Makefile
-@@ -159,9 +159,8 @@ darwin-arm64: ## Build Go
+--- percona-toolkit-3.7.1-4.orig/Makefile.PL 2026-07-03 17:01:03.000000000
+0200
++++ percona-toolkit-3.7.1-4/Makefile.PL 2026-10-17 17:33:05.996984171
+0200
+@@ -6,7 +6,7 @@
+ pkgs = $(shell find src/go -type d -name "pt-*" -exec basename {} \;)
+
+ gotools:
+- cd src/go && VERSION=$(VERSION) $(MAKE) build
++ cd src/go && $(MAKE) build VERSION=$(VERSION) BUILD_DATE=$(BUILD_DATE)
COMMIT=$(COMMIT) V=1
+ @$(foreach pkg,$(pkgs),cp bin/$(pkg) $(INST_BIN);)
+
+ goclean:
+
+Index: percona-toolkit-3.7.1-4/src/go/Makefile
+===================================================================
+--- percona-toolkit-3.7.1-4.orig/src/go/Makefile 2026-07-03
17:01:03.000000000 +0200
++++ percona-toolkit-3.7.1-4/src/go/Makefile 2026-10-17 17:41:10.803439330
+0200
+@@ -159,9 +159,8 @@
build: ## Build Go tools for
current platform
@echo "Building binaries in ${BIN_DIR} as version ${VERSION}"
@@ -13,17 +27,4 @@
style: ## Check code style
@echo ">> checking code style"
-Index: percona-toolkit-3.7.1/Makefile.PL
-===================================================================
---- percona-toolkit-3.7.1.orig/Makefile.PL
-+++ percona-toolkit-3.7.1/Makefile.PL
-@@ -4,7 +4,7 @@ use ExtUtils::MY;
- sub MY::postamble {
- return <<'MAKE_GOTOOLS';
- gotools:
-- cd src/go && $(MAKE) build
-+ cd src/go && $(MAKE) build VERSION=$(VERSION) BUILD_DATE=$(BUILD_DATE)
COMMIT=$(COMMIT) V=1
-
- MAKE_GOTOOLS
- }
++++++ vendor.tar.zst ++++++
++++ 827604 lines of diff (skipped)
