Matthias Eliasson 07b395ac73 - Security fix for bsc#1253608, CVE-2025-47913, GO-2025-4116 ...

- Add update-crypto-cve-2025-47913.patch: Update golang.org/x/crypto
  from v0.37.0 to v0.43.0 to fix SSH agent DoS vulnerability where
  SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed
  response will panic and cause early termination of the client
  process. Affects pkg/runner/action_cache.go which uses SSH agent
  functions via go-git.
- Regenerate vendor.tar.gz with updated dependencies

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/act?expand=0&rev=26

2025-11-20 17:45:54 +00:00

2.0 KiB

Raw Permalink Blame History

View Raw