Accepting request 1299054 from hardware

OBS-URL: https://build.opensuse.org/request/show/1299054 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/framework-inputmodule-control?expand=0&rev=3
- Update vendor tarball to fix CVE-2023-53156 (bsc#1247082) and
2025-08-12 15:05:36 +00:00 · 2025-08-12 11:51:44 +00:00
5 changed files with 25 additions and 4 deletions
--- a/2
+++ b/2
@@ -2,6 +2,6 @@
  <service name="cargo_vendor" mode="disabled">
     <param name="src">inputmodule-control-*.tar.gz</param>
     <param name="cargotoml">inputmodule-control/Cargo.toml</param>
-     <param name="update">false</param>
+     <param name="update">true</param>
  </service>
 </services>
--- a/framework-inputmodule-control.changes
+++ b/framework-inputmodule-control.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Aug 11 12:16:43 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update vendor tarball to fix CVE-2023-53156 (bsc#1247082) and
+  CVE-2024-58266 (bsc#1247198)
+- Add update-toolchain.patch to update rust edition to 2024 to enable updates
+  of vendored crates
+
 -------------------------------------------------------------------
 Tue Mar 18 14:59:54 UTC 2025 - Nico Krapp <nico.krapp@suse.com>

--- a/framework-inputmodule-control.spec
+++ b/framework-inputmodule-control.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package framework-inputmodule-control
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -26,6 +26,9 @@ License:        MIT
 URL:            https://github.com/FrameworkComputer/inputmodule-rs
 Source0:        https://github.com/FrameworkComputer/inputmodule-rs/archive/refs/tags/v%{version}.tar.gz#/%{shortname}-%{version}.tar.gz
 Source1:        vendor.tar.zst
+# PATCH-FIX-OPENSUSE update-toolchain.patch to update rust edition to 2024
+# to be able to update vendored dependencies
+Patch0:         update-toolchain.patch
 BuildRequires:  cargo-packaging
 BuildRequires:  pkgconfig(libsystemd)
 Recommends:     framework-inputmodule-udev-rules
--- a/update-toolchain.patch
+++ b/update-toolchain.patch
@@ -0,0 +1,10 @@
+Index: inputmodule-rs-0.2.0/rust-toolchain.toml
+===================================================================
+--- inputmodule-rs-0.2.0.orig/rust-toolchain.toml
+++ inputmodule-rs-0.2.0/rust-toolchain.toml
+@@ -1,4 +1,4 @@
+ [toolchain]
+-channel = "1.74.0"
+channel = "1.85.0"
+ targets = ["thumbv6m-none-eabi"]
+ components = ["clippy", "rustfmt"]
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:682d1b30607a0f3d0f7b2c3bce9e4c2d931900cb5793cd0120eddb0c2e6d405b
-size 38027388
+oid sha256:0b7ff81215dd468f95248fa23dd83004e0bc935b7e126003fdd80a2db13b577c
+size 44784476