fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5#64882
Merged
dnegreira merged 1 commit intoSep 2, 2025
Merged
Octo STS / ci-diff-report
succeeded
Sep 2, 2025 in 0s
Package diff
Package diff
Details
Package Diffs
✅ aarch64/buck2-20250401-r3.apk -> aarch64/buck2-20250401-r4.apk
📦 Package diff:
&apk.Package{
Name: "buck2",
- Version: "20250401-r3",
+ Version: "20250401-r4",
Arch: "aarch64",
Description: "Build system, successor to Buck",
... // 2 identical fields
Maintainer: "wolfi",
URL: "",
Checksum: []uint8{
- 0xa2, 0xe1, 0x73, 0x4b, 0x3b, 0x44, 0x2c, 0xeb, 0xcf, 0xa2, 0xc4, 0x0f, 0x41, 0xb4, 0xc9, 0x66, // -|..sK;D,.....A..f|
- 0x6b, 0x86, 0x0a, 0xde, // -|k...|
+ 0x95, 0x7c, 0xac, 0xf8, 0x44, 0xfd, 0x1d, 0x10, 0x5a, 0xc2, 0xbf, 0x28, 0x07, 0xa1, 0x61, 0x9c, // +|.|..D...Z..(..a.|
+ 0x38, 0x6b, 0x4f, 0xe8, // +|8kO.|
},
Dependencies: {"so:ld-linux-aarch64.so.1", "so:libc.so.6", "so:libgcc_s.so.1", "so:libm.so.6"},
- Provides: []string{"cmd:buck2=20250401-r3"},
+ Provides: []string{"cmd:buck2=20250401-r4"},
InstallIf: nil,
- Size: 46105198,
+ Size: 45833637,
- InstalledSize: 136364721,
+ InstalledSize: 135337305,
ProviderPriority: 0,
- BuildTime: s"2025-08-14 12:48:59 +0000 UTC",
+ BuildTime: s"2025-09-02 09:08:40 +0000 UTC",
- BuildDate: 1755175739,
+ BuildDate: 1756804120,
RepoCommit: strings.Join({
- "e65df5c407818b64f22f80cb5719b4be6242f7ff",
+ "1e81754cc4ff561de6d2ff98c58ca36707c37362",
}, ""),
Replaces: nil,
DataHash: "",
}
➕ Added:
var/lib/db/sbom/buck2-20250401-r4.spdx.json(644)
➖ Removed:
var/lib/db/sbom/buck2-20250401-r3.spdx.json(644)
🔺 Changed:
.melange.yaml
- -rw-r--r-- 11469 2025-08-14 12:48:59 .melange.yaml
+ -rw-r--r-- 11512 2025-09-02 09:08:40 .melange.yaml
usr/bin/buck2
- -rwxr-xr-x 136332608 2025-08-14 12:48:59 buck2
- APK-TOOLS.checksum.SHA1: "ea348ee25f06c6b991d2a195a0417ee62b9e3d20"
+ -rwxr-xr-x 135305192 2025-09-02 09:08:40 buck2
+ APK-TOOLS.checksum.SHA1: "110f84da1f80fde3b23a042439649f3af53fb484"✅ x86_64/buck2-20250401-r3.apk -> x86_64/buck2-20250401-r4.apk
📦 Package diff:
&apk.Package{
Name: "buck2",
- Version: "20250401-r3",
+ Version: "20250401-r4",
Arch: "x86_64",
Description: "Build system, successor to Buck",
... // 2 identical fields
Maintainer: "wolfi",
URL: "",
Checksum: []uint8{
- 0xa6, 0xb7, 0x40, 0xe6, 0x51, 0xda, 0x2d, 0x52, 0x55, 0xc7, 0xc2, 0x9b, 0x88, 0xa2, 0x54, 0x0e, // -|..@.Q.-RU.....T.|
- 0x9d, 0xe7, 0x9c, 0x82, // -|....|
+ 0xe7, 0xde, 0x26, 0x7a, 0x72, 0xcd, 0xee, 0xd7, 0x0a, 0x5d, 0x6d, 0xa5, 0x2b, 0xbc, 0x6b, 0xf4, // +|..&zr....]m.+.k.|
+ 0x0d, 0x68, 0x9e, 0x1d, // +|.h..|
},
Dependencies: {"so:ld-linux-x86-64.so.2", "so:libc.so.6", "so:libgcc_s.so.1", "so:libm.so.6"},
- Provides: []string{"cmd:buck2=20250401-r3"},
+ Provides: []string{"cmd:buck2=20250401-r4"},
InstallIf: nil,
- Size: 42404864,
+ Size: 42171976,
- InstalledSize: 139942088,
+ InstalledSize: 138900440,
ProviderPriority: 0,
- BuildTime: s"2025-08-14 12:48:59 +0000 UTC",
+ BuildTime: s"2025-09-02 09:08:40 +0000 UTC",
- BuildDate: 1755175739,
+ BuildDate: 1756804120,
RepoCommit: strings.Join({
- "e65df5c407818b64f22f80cb5719b4be6242f7ff",
+ "1e81754cc4ff561de6d2ff98c58ca36707c37362",
}, ""),
Replaces: nil,
DataHash: "",
}
➕ Added:
var/lib/db/sbom/buck2-20250401-r4.spdx.json(644)
➖ Removed:
var/lib/db/sbom/buck2-20250401-r3.spdx.json(644)
🔺 Changed:
.melange.yaml
- -rw-r--r-- 11433 2025-08-14 12:48:59 .melange.yaml
+ -rw-r--r-- 11476 2025-09-02 09:08:40 .melange.yaml
usr/bin/buck2
- -rwxr-xr-x 139909976 2025-08-14 12:48:59 buck2
- APK-TOOLS.checksum.SHA1: "835b5748dff9d627bdb83f6fcbd3f0d94bf80b93"
+ -rwxr-xr-x 138868328 2025-09-02 09:08:40 buck2
+ APK-TOOLS.checksum.SHA1: "fa471b16e629616a7111a2bc6729acfe7890602b"
Loading