Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package prometheus-blackbox_exporter for openSUSE:Factory checked in at 2023-05-03 12:57:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/prometheus-blackbox_exporter (Old) and /work/SRC/openSUSE:Factory/.prometheus-blackbox_exporter.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "prometheus-blackbox_exporter" Wed May 3 12:57:42 2023 rev:13 rq:1084204 version:0.19.0 Changes: -------- --- /work/SRC/openSUSE:Factory/prometheus-blackbox_exporter/prometheus-blackbox_exporter.changes 2023-04-25 16:44:38.170871457 +0200 +++ /work/SRC/openSUSE:Factory/.prometheus-blackbox_exporter.new.1533/prometheus-blackbox_exporter.changes 2023-05-03 12:57:49.436025212 +0200 @@ -1,0 +2,10 @@ +Thu Apr 27 09:50:45 UTC 2023 - Witek Bedyk <witold.be...@suse.com> + +- Fix authentication bypass via cache poisoning + (CVE-2022-46146, bsc#1208062) +- Add `min_version` parameter of `tls_config` to allow enabling + TLS 1.0 and 1.1 (bsc#1209113) +- Add: + * 0001-Update-go-modules.patch + +------------------------------------------------------------------- New: ---- 0001-Update-go-modules.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ prometheus-blackbox_exporter.spec ++++++ --- /var/tmp/diff_new_pack.OXbJz9/_old 2023-05-03 12:57:49.944028196 +0200 +++ /var/tmp/diff_new_pack.OXbJz9/_new 2023-05-03 12:57:49.948028220 +0200 @@ -35,6 +35,8 @@ Source0: blackbox_exporter-%{version}.tar.gz Source1: vendor.tar.gz Source2: prometheus-blackbox_exporter.service +# This patch has been applied before generating vendor tarball +Patch1: 0001-Update-go-modules.patch BuildRequires: fdupes BuildRequires: golang-packaging %if 0%{?rhel} @@ -56,7 +58,7 @@ Prometheus blackbox exporter allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. %prep -%autosetup -a1 -n blackbox_exporter-%{version} +%autosetup -a1 -p1 -n blackbox_exporter-%{version} %build %goprep github.com/prometheus/blackbox_exporter ++++++ 0001-Update-go-modules.patch ++++++ Index: blackbox_exporter-0.19.0/go.mod =================================================================== --- blackbox_exporter-0.19.0.orig/go.mod +++ blackbox_exporter-0.19.0/go.mod @@ -5,13 +5,34 @@ require ( github.com/go-kit/kit v0.10.0 github.com/miekg/dns v1.1.41 github.com/pkg/errors v0.9.1 - github.com/prometheus/client_golang v1.10.0 + github.com/prometheus/client_golang v1.12.1 github.com/prometheus/client_model v0.2.0 - github.com/prometheus/common v0.23.0 - github.com/prometheus/exporter-toolkit v0.5.1 - golang.org/x/net v0.0.0-20210505214959-0714010a04ed + github.com/prometheus/common v0.34.0 + github.com/prometheus/exporter-toolkit v0.7.3 + golang.org/x/net v0.0.0-20220225172249-27dd8689420f gopkg.in/alecthomas/kingpin.v2 v2.2.6 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b ) -go 1.13 +require ( + github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect + github.com/alecthomas/units v0.0.0-20190924025748-f65c72e2690d // indirect + github.com/beorn7/perks v1.0.1 // indirect + github.com/cespare/xxhash/v2 v2.1.2 // indirect + github.com/go-kit/log v0.2.0 // indirect + github.com/go-logfmt/logfmt v0.5.1 // indirect + github.com/golang/protobuf v1.5.2 // indirect + github.com/jpillora/backoff v1.0.0 // indirect + github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect + github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f // indirect + github.com/prometheus/procfs v0.7.3 // indirect + golang.org/x/crypto v0.0.0-20220427172511-eb4f295cb31f // indirect + golang.org/x/oauth2 v0.0.0-20220223155221-ee480838109b // indirect + golang.org/x/sys v0.0.0-20220114195835-da31bd327af9 // indirect + golang.org/x/text v0.3.7 // indirect + google.golang.org/appengine v1.6.6 // indirect + google.golang.org/protobuf v1.26.0 // indirect + gopkg.in/yaml.v2 v2.4.0 // indirect +) + +go 1.17 ++++++ blackbox_exporter-0.19.0.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/blackbox_exporter-0.19.0/.gitignore new/blackbox_exporter-0.19.0/.gitignore --- old/blackbox_exporter-0.19.0/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/blackbox_exporter-0.19.0/.gitignore 2021-05-10 14:54:23.000000000 +0200 @@ -0,0 +1,30 @@ +# Compiled Object files, Static and Dynamic libs (Shared Objects) +*.o +*.a +*.so + +# Folders +_obj +_test + +# Architecture specific extensions/prefixes +*.[568vq] +[568vq].out + +*.cgo1.go +*.cgo2.c +_cgo_defun.c +_cgo_gotypes.go +_cgo_export.* + +_testmain.go + +*.exe +dependencies-stamp +/blackbox_exporter +/.build +/.release +/.tarballs +.deps +*.tar.gz +/vendor ++++++ blackbox_exporter.obsinfo ++++++ --- /var/tmp/diff_new_pack.OXbJz9/_old 2023-05-03 12:57:50.144029372 +0200 +++ /var/tmp/diff_new_pack.OXbJz9/_new 2023-05-03 12:57:50.144029372 +0200 @@ -3,4 +3,3 @@ mtime: 1620651263 commit: 5d575b88eb12c65720862e8ad2c5890ba33d1ed0 - ++++++ vendor.tar.gz ++++++ ++++ 94036 lines of diff (skipped)