act/vendor.tar.gz at factory - act - openSUSE Gitea

pool/act

SHA256

Files

Matthias Eliasson 07b395ac73 - Security fix for bsc#1253608, CVE-2025-47913, GO-2025-4116

- Add update-crypto-cve-2025-47913.patch: Update golang.org/x/crypto
  from v0.37.0 to v0.43.0 to fix SSH agent DoS vulnerability where
  SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed
  response will panic and cause early termination of the client
  process. Affects pkg/runner/action_cache.go which uses SSH agent
  functions via go-git.
- Regenerate vendor.tar.gz with updated dependencies

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/act?expand=0&rev=26

2025-11-20 17:45:54 +00:00

4 lines

132 BLFS

Plaintext

Raw Permalink Blame History

	`version https://git-lfs.github.com/spec/v1`
	`oid sha256:9818b6371a61afadeb922e797a3ef9cc7d75abd17d1645d013c7295859238cb2`
	`size 5769128`