Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package rust1.65 for openSUSE:Factory
checked in at 2023-01-12 22:42:35
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/rust1.65 (Old)
and /work/SRC/openSUSE:Factory/.rust1.65.new.32243 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rust1.65"
Thu Jan 12 22:42:35 2023 rev:4 rq:1057886 version:1.65.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/rust1.65/rust1.65.changes 2022-12-09
13:15:33.102291494 +0100
+++ /work/SRC/openSUSE:Factory/.rust1.65.new.32243/rust1.65.changes
2023-01-12 22:42:38.156305720 +0100
@@ -1,0 +2,12 @@
+Thu Jan 12 03:34:54 UTC 2023 - William Brown <william.br...@suse.com>
+
+- Disable src tidy test as it is incompatible with cve patches
+
+-------------------------------------------------------------------
+Tue Jan 10 08:58:18 UTC 2023 - William Brown <william.br...@suse.com>
+
+- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
+ * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
+ * 0002-Rebuild-Cargo.lock.patch
+
+-------------------------------------------------------------------
New:
----
0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
0002-Rebuild-Cargo.lock.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ rust1.65.spec ++++++
--- /var/tmp/diff_new_pack.CcYSYD/_old 2023-01-12 22:42:47.692359767 +0100
+++ /var/tmp/diff_new_pack.CcYSYD/_new 2023-01-12 22:42:47.696359790 +0100
@@ -1,7 +1,7 @@
#
# spec file
#
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
# Copyright (c) 2019 Luke Jones, l...@ljones.dev
#
# All modifications and additions to the file contributed by third parties
@@ -253,6 +253,8 @@
Patch0: ignore-Wstring-conversion.patch
# IMPORTANT - To generate patches for submodules in git so they apply
relatively you can use
# git format-patch --dst-prefix=b/src/tools/cargo/ HEAD~2
+Patch1: 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
+Patch2: 0002-Rebuild-Cargo.lock.patch
BuildRequires: chrpath
BuildRequires: curl
@@ -635,9 +637,9 @@
# we can use it with -Z gcc-ld=lld (which is sadly trapped in nightly). We
can't exclude
# a single test so sadly we have to exclude that whole suite.
%ifarch aarch64
-python3 ./x.py test --target=%{rust_triple} --exclude src/test/run-make
+python3 ./x.py test --target=%{rust_triple} --exclude
src/test/run-make,src/tools/tidy
%else
-python3 ./x.py test --target=%{rust_triple}
+python3 ./x.py test --target=%{rust_triple} --exclude src/tools/tidy
%endif
# End with test
++++++ 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch ++++++
++++ 301664 lines (skipped)
++++++ 0002-Rebuild-Cargo.lock.patch ++++++
++++ 5519 lines (skipped)
