Skip to content

buck2/20250401-r2: cve remediation#62906

Merged
kbsteere merged 3 commits into
mainfrom
cve-buck2-20250401-r2-6b394d5bb77de650c7b3aa909246b697
Aug 14, 2025
Merged

buck2/20250401-r2: cve remediation#62906
kbsteere merged 3 commits into
mainfrom
cve-buck2-20250401-r2-6b394d5bb77de650c7b3aa909246b697

buck2: remove cargobump

a7eaaf4
Select commit
Loading
Failed to load commit list.
Octo STS / ci-diff-report succeeded Aug 14, 2025 in 0s

Package diff

Package diff

Details

Package Diffs

aarch64/buck2-20250401-r2.apk -> aarch64/buck2-20250401-r3.apk

📦 Package diff:

  &apk.Package{
  	Name:        "buck2",
- 	Version:     "20250401-r2",
+ 	Version:     "20250401-r3",
  	Arch:        "aarch64",
  	Description: "Build system, successor to Buck",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0xbf, 0x61, 0x43, 0xd2, 0x77, 0xab, 0xc9, 0x60, 0xd1, 0x2a, 0xa0, 0x3e, 0x14, 0xdb, 0x16, 0xc8, // -|.aC.w..`.*.>....|
- 		0xfa, 0x81, 0xc1, 0xfd,                                                                         // -|....|
+ 		0xf7, 0xa9, 0x8a, 0x6b, 0xc3, 0x62, 0x9c, 0xd0, 0xfb, 0x58, 0x2c, 0x88, 0xad, 0xa4, 0xce, 0x97, // +|...k.b...X,.....|
+ 		0xcc, 0x5b, 0xc9, 0x50,                                                                         // +|.[.P|
  	},
  	Dependencies:     {"so:ld-linux-aarch64.so.1", "so:libc.so.6", "so:libgcc_s.so.1", "so:libm.so.6"},
- 	Provides:         []string{"cmd:buck2=20250401-r2"},
+ 	Provides:         []string{"cmd:buck2=20250401-r3"},
  	InstallIf:        nil,
- 	Size:             46088021,
+ 	Size:             46105201,
- 	InstalledSize:    136363427,
+ 	InstalledSize:    136364721,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-19 01:26:36 +0000 UTC",
+ 	BuildTime:        s"2025-08-14 08:47:32 +0000 UTC",
- 	BuildDate:        1752888396,
+ 	BuildDate:        1755161252,
  	RepoCommit: strings.Join({
- 		"a95f85c4e2b21c7c69f4bb2039e536b09737a93b",
+ 		"61863e77ab723cefbb5a730d59eefacdea9d70a4",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/buck2-20250401-r3.spdx.json

➖ Removed:

  • var/lib/db/sbom/buck2-20250401-r2.spdx.json

🔺 Changed:

.PKGINFO
- -rw-r--r-- 475 2025-07-19 01:26:36 .PKGINFO
+ -rw-r--r-- 475 2025-08-14 08:47:32 .PKGINFO
.melange.yaml
- -rw-r--r-- 11476 2025-07-19 01:26:36 .melange.yaml
+ -rw-r--r-- 11515 2025-08-14 08:47:32 .melange.yaml
usr/bin/buck2
- -rwxr-xr-x 136331416 2025-07-19 01:26:36 buck2
-   APK-TOOLS.checksum.SHA1: "e47858dd222c618260062010cb60937c14238b5b"
+ -rwxr-xr-x 136332608 2025-08-14 08:47:32 buck2
+   APK-TOOLS.checksum.SHA1: "ea348ee25f06c6b991d2a195a0417ee62b9e3d20"

x86_64/buck2-20250401-r2.apk -> x86_64/buck2-20250401-r3.apk

📦 Package diff:

  &apk.Package{
  	Name:        "buck2",
- 	Version:     "20250401-r2",
+ 	Version:     "20250401-r3",
  	Arch:        "x86_64",
  	Description: "Build system, successor to Buck",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0x1f, 0x5e, 0x4c, 0xc5, 0x97, 0x15, 0xdf, 0xf3, 0xcf, 0x93, 0x2b, 0xc3, 0x8f, 0x38, 0x78, 0x26, // -|.^L.......+..8x&|
- 		0x14, 0x31, 0xaa, 0xee,                                                                         // -|.1..|
+ 		0x20, 0x19, 0xb8, 0x62, 0x0b, 0xee, 0xd2, 0xd3, 0xc3, 0x34, 0x09, 0xa9, 0x89, 0xbd, 0x5f, 0xd7, // +| ..b.....4...._.|
+ 		0x85, 0x67, 0x80, 0x58,                                                                         // +|.g.X|
  	},
  	Dependencies:     {"so:ld-linux-x86-64.so.2", "so:libc.so.6", "so:libgcc_s.so.1", "so:libm.so.6"},
- 	Provides:         []string{"cmd:buck2=20250401-r2"},
+ 	Provides:         []string{"cmd:buck2=20250401-r3"},
  	InstallIf:        nil,
- 	Size:             42348365,
+ 	Size:             42404859,
- 	InstalledSize:    139913690,
+ 	InstalledSize:    139942088,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-07-19 01:26:36 +0000 UTC",
+ 	BuildTime:        s"2025-08-14 08:47:32 +0000 UTC",
- 	BuildDate:        1752888396,
+ 	BuildDate:        1755161252,
  	RepoCommit: strings.Join({
- 		"a95f85c4e2b21c7c69f4bb2039e536b09737a93b",
+ 		"61863e77ab723cefbb5a730d59eefacdea9d70a4",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/buck2-20250401-r3.spdx.json

➖ Removed:

  • var/lib/db/sbom/buck2-20250401-r2.spdx.json

🔺 Changed:

.PKGINFO
- -rw-r--r-- 473 2025-07-19 01:26:36 .PKGINFO
+ -rw-r--r-- 473 2025-08-14 08:47:32 .PKGINFO
.melange.yaml
- -rw-r--r-- 11440 2025-07-19 01:26:36 .melange.yaml
+ -rw-r--r-- 11479 2025-08-14 08:47:32 .melange.yaml
usr/bin/buck2
- -rwxr-xr-x 139881680 2025-07-19 01:26:36 buck2
-   APK-TOOLS.checksum.SHA1: "152439189c93530ae22da4f002aa2b1671fd4e97"
+ -rwxr-xr-x 139909976 2025-08-14 08:47:32 buck2
+   APK-TOOLS.checksum.SHA1: "835b5748dff9d627bdb83f6fcbd3f0d94bf80b93"