products/PackageHub
SHA256
30
1
Fork 13
Code Issues Pull Requests 21 Actions Activity

Pull request for security update for act #249

Manually merged
products merged 1 commits from rfrohl/PackageHub:maintenance-update-1764582506 into leap-16.0 2025-12-04 12:49:40 +01:00
Conversation 20 Commits 1 Files Changed 2 +16 -1
2 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
act

Submodule act updated: ed079edc0d...8bfe9d9547

15
patchinfo.20251201094854511762.93181000773252/_patchinfo Normal file
View File

@@ -0,0 +1,15 @@
<patchinfo>
<issue tracker="bnc" id="1253608">VUL-0: CVE-2025-47913: act: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request</issue>
<issue tracker="cve" id="2025-47913">cve#2025-47913 not resolved: 404 Client Error: Not Found for url: https://bugzilla.suse.com/api2/issues/?references__name=CVE-2025-47913</issue>
<packager>elimat</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for act</summary>
<description>This update for act fixes the following issues:
- CVE-2025-47913: Prevent panic in embedded golang.org/x/crypto/ssh/agent client when
receiving unexpected message types for key listing or signing requests (boo#1253608)
</description>
<package>act</package>
<seperate_build_arch/>
</patchinfo>