Skip to content

fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5#64882

Merged
dnegreira merged 1 commit into
wolfi-dev:mainfrom
Ankush-Pathak:fix-buck2-GHSA-xwfj-jgwm-7wp5
Sep 2, 2025
Merged

fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5#64882
dnegreira merged 1 commit into
wolfi-dev:mainfrom
Ankush-Pathak:fix-buck2-GHSA-xwfj-jgwm-7wp5

fix(buck2): Remediate GHSA-xwfj-jgwm-7wp5

5937948
Select commit
Loading
Failed to load commit list.
Octo STS / ci-diff-report succeeded Sep 2, 2025 in 0s

Package diff

Package diff

Details

Package Diffs

aarch64/buck2-20250401-r3.apk -> aarch64/buck2-20250401-r4.apk

📦 Package diff:

  &apk.Package{
  	Name:        "buck2",
- 	Version:     "20250401-r3",
+ 	Version:     "20250401-r4",
  	Arch:        "aarch64",
  	Description: "Build system, successor to Buck",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0xa2, 0xe1, 0x73, 0x4b, 0x3b, 0x44, 0x2c, 0xeb, 0xcf, 0xa2, 0xc4, 0x0f, 0x41, 0xb4, 0xc9, 0x66, // -|..sK;D,.....A..f|
- 		0x6b, 0x86, 0x0a, 0xde,                                                                         // -|k...|
+ 		0x95, 0x7c, 0xac, 0xf8, 0x44, 0xfd, 0x1d, 0x10, 0x5a, 0xc2, 0xbf, 0x28, 0x07, 0xa1, 0x61, 0x9c, // +|.|..D...Z..(..a.|
+ 		0x38, 0x6b, 0x4f, 0xe8,                                                                         // +|8kO.|
  	},
  	Dependencies:     {"so:ld-linux-aarch64.so.1", "so:libc.so.6", "so:libgcc_s.so.1", "so:libm.so.6"},
- 	Provides:         []string{"cmd:buck2=20250401-r3"},
+ 	Provides:         []string{"cmd:buck2=20250401-r4"},
  	InstallIf:        nil,
- 	Size:             46105198,
+ 	Size:             45833637,
- 	InstalledSize:    136364721,
+ 	InstalledSize:    135337305,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-08-14 12:48:59 +0000 UTC",
+ 	BuildTime:        s"2025-09-02 09:08:40 +0000 UTC",
- 	BuildDate:        1755175739,
+ 	BuildDate:        1756804120,
  	RepoCommit: strings.Join({
- 		"e65df5c407818b64f22f80cb5719b4be6242f7ff",
+ 		"1e81754cc4ff561de6d2ff98c58ca36707c37362",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/buck2-20250401-r4.spdx.json (644)

➖ Removed:

  • var/lib/db/sbom/buck2-20250401-r3.spdx.json (644)

🔺 Changed:

.melange.yaml
- -rw-r--r-- 11469 2025-08-14 12:48:59 .melange.yaml
+ -rw-r--r-- 11512 2025-09-02 09:08:40 .melange.yaml
usr/bin/buck2
- -rwxr-xr-x 136332608 2025-08-14 12:48:59 buck2
-   APK-TOOLS.checksum.SHA1: "ea348ee25f06c6b991d2a195a0417ee62b9e3d20"
+ -rwxr-xr-x 135305192 2025-09-02 09:08:40 buck2
+   APK-TOOLS.checksum.SHA1: "110f84da1f80fde3b23a042439649f3af53fb484"

x86_64/buck2-20250401-r3.apk -> x86_64/buck2-20250401-r4.apk

📦 Package diff:

  &apk.Package{
  	Name:        "buck2",
- 	Version:     "20250401-r3",
+ 	Version:     "20250401-r4",
  	Arch:        "x86_64",
  	Description: "Build system, successor to Buck",
  	... // 2 identical fields
  	Maintainer: "wolfi",
  	URL:        "",
  	Checksum: []uint8{
- 		0xa6, 0xb7, 0x40, 0xe6, 0x51, 0xda, 0x2d, 0x52, 0x55, 0xc7, 0xc2, 0x9b, 0x88, 0xa2, 0x54, 0x0e, // -|..@.Q.-RU.....T.|
- 		0x9d, 0xe7, 0x9c, 0x82,                                                                         // -|....|
+ 		0xe7, 0xde, 0x26, 0x7a, 0x72, 0xcd, 0xee, 0xd7, 0x0a, 0x5d, 0x6d, 0xa5, 0x2b, 0xbc, 0x6b, 0xf4, // +|..&zr....]m.+.k.|
+ 		0x0d, 0x68, 0x9e, 0x1d,                                                                         // +|.h..|
  	},
  	Dependencies:     {"so:ld-linux-x86-64.so.2", "so:libc.so.6", "so:libgcc_s.so.1", "so:libm.so.6"},
- 	Provides:         []string{"cmd:buck2=20250401-r3"},
+ 	Provides:         []string{"cmd:buck2=20250401-r4"},
  	InstallIf:        nil,
- 	Size:             42404864,
+ 	Size:             42171976,
- 	InstalledSize:    139942088,
+ 	InstalledSize:    138900440,
  	ProviderPriority: 0,
- 	BuildTime:        s"2025-08-14 12:48:59 +0000 UTC",
+ 	BuildTime:        s"2025-09-02 09:08:40 +0000 UTC",
- 	BuildDate:        1755175739,
+ 	BuildDate:        1756804120,
  	RepoCommit: strings.Join({
- 		"e65df5c407818b64f22f80cb5719b4be6242f7ff",
+ 		"1e81754cc4ff561de6d2ff98c58ca36707c37362",
  	}, ""),
  	Replaces: nil,
  	DataHash: "",
  }

➕ Added:

  • var/lib/db/sbom/buck2-20250401-r4.spdx.json (644)

➖ Removed:

  • var/lib/db/sbom/buck2-20250401-r3.spdx.json (644)

🔺 Changed:

.melange.yaml
- -rw-r--r-- 11433 2025-08-14 12:48:59 .melange.yaml
+ -rw-r--r-- 11476 2025-09-02 09:08:40 .melange.yaml
usr/bin/buck2
- -rwxr-xr-x 139909976 2025-08-14 12:48:59 buck2
-   APK-TOOLS.checksum.SHA1: "835b5748dff9d627bdb83f6fcbd3f0d94bf80b93"
+ -rwxr-xr-x 138868328 2025-09-02 09:08:40 buck2
+   APK-TOOLS.checksum.SHA1: "fa471b16e629616a7111a2bc6729acfe7890602b"