Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openbao for openSUSE:Factory checked in at 2026-10-27 17:02:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openbao (Old) and /work/SRC/openSUSE:Factory/.openbao.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openbao" Tue Oct 27 17:02:44 2026 rev:27 rq:1392989 version:2.6.5 Changes: -------- --- /work/SRC/openSUSE:Factory/openbao/openbao.changes 2026-10-02 23:08:47.948012683 +0200 +++ /work/SRC/openSUSE:Factory/.openbao.new.2252680/openbao.changes 2026-10-27 17:07:08.582164495 +0100 @@ -1,0 +2,24 @@ +Tue Oct 27 06:46:47 UTC 2026 - Johannes Kastl <[email protected]> + +- Update to version 2.6.5: + * SECURITY + - auth/cert: Add resolve path canonicalization to CRL paths. + GHSA-736f-82w7-hj22. [GH-4325] + - auth/ldap: Add resolve path canonicalization to user, group + paths. GHSA-736f-82w7-hj22. [GH-4325] + - auth/radius: Add resolve path canonicalization to user paths. + GHSA-736f-82w7-hj22. [GH-4325] + - secrets/approle: Add resolve path canonicalization in Role ID + paths. GHSA-736f-82w7-hj22. [GH-4325] + - secrets/identity: Ensure client_type=public is denied with + client_credentials=true in the OIDC provider. + GHSA-q824-44ff-f5j5. [GH-4325] + - secrets/ssh: Deny wildcards (*) in SSH certificate identity + templating by default. Configurable via the + allow_wildcards_in_identity_templates parameter. + GHSA-h76r-48x5-36hg. [GH-4325] + - secrets/transit: Ensure imported key backup does not allow + clobbering arbitrary keys through path traversal. + GHSA-5pmx-2p74-x478. [GH-4325] + +------------------------------------------------------------------- Old: ---- openbao-2.6.4.obscpio ui-2.6.4.tar.gz New: ---- openbao-2.6.5.obscpio ui-2.6.5.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openbao.spec ++++++ --- /var/tmp/diff_new_pack.dXRXDB/_old 2026-10-27 17:07:18.344573416 +0100 +++ /var/tmp/diff_new_pack.dXRXDB/_new 2026-10-27 17:07:18.349573625 +0100 @@ -23,7 +23,7 @@ %define short_executable_name bao Name: openbao -Version: 2.6.4 +Version: 2.6.5 Release: 0 Summary: Manage, store, and distribute sensitive data License: MPL-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.dXRXDB/_old 2026-10-27 17:07:18.434577186 +0100 +++ /var/tmp/diff_new_pack.dXRXDB/_new 2026-10-27 17:07:18.438577353 +0100 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/openbao/openbao.git</param> <param name="scm">git</param> - <param name="revision">refs/tags/v2.6.4</param> + <param name="revision">refs/tags/v2.6.5</param> <param name="package-meta">yes</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.dXRXDB/_old 2026-10-27 17:07:18.465578484 +0100 +++ /var/tmp/diff_new_pack.dXRXDB/_new 2026-10-27 17:07:18.470578694 +0100 @@ -3,6 +3,6 @@ <param name="url">https://github.com/openbao/openbao</param> <param name="changesrevision">028992583c693c4de6350b8aa52ff85e30375a99</param></service><service name="tar_scm"> <param name="url">https://github.com/openbao/openbao.git</param> - <param name="changesrevision">8206bc114009a0e468bbdae143f292922e1dbe27</param></service></servicedata> + <param name="changesrevision">b814361ea23440b881b43882e9d1bd950342471c</param></service></servicedata> (No newline at EOF) ++++++ openbao-2.6.4.obscpio -> openbao-2.6.5.obscpio ++++++ /work/SRC/openSUSE:Factory/openbao/openbao-2.6.4.obscpio /work/SRC/openSUSE:Factory/.openbao.new.2252680/openbao-2.6.5.obscpio differ: char 49, line 1 ++++++ openbao.obsinfo ++++++ --- /var/tmp/diff_new_pack.dXRXDB/_old 2026-10-27 17:07:18.571582924 +0100 +++ /var/tmp/diff_new_pack.dXRXDB/_new 2026-10-27 17:07:18.578583218 +0100 @@ -1,5 +1,5 @@ name: openbao -version: 2.6.4 -mtime: 1790861551 -commit: 8206bc114009a0e468bbdae143f292922e1dbe27 +version: 2.6.5 +mtime: 1793043122 +commit: b814361ea23440b881b43882e9d1bd950342471c ++++++ ui-2.6.4.tar.gz -> ui-2.6.5.tar.gz ++++++ /work/SRC/openSUSE:Factory/openbao/ui-2.6.4.tar.gz /work/SRC/openSUSE:Factory/.openbao.new.2252680/ui-2.6.5.tar.gz differ: char 13, line 1 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/openbao/vendor.tar.gz /work/SRC/openSUSE:Factory/.openbao.new.2252680/vendor.tar.gz differ: char 13, line 1
