public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Jonathan Wright <jonathan@almalinux.org>
To: git-commits@fedoraproject.org
Subject: [rpms/vaultwarden] epel10: update to 1.37.1 rhbz#2510094
Date: Mon, 03 Aug 2026 14:28:31 GMT [thread overview]
Message-ID: <178576731130.1.9124185119249211228.rpms-vaultwarden-76df42e0e0ee@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/vaultwarden
Branch : epel10
Commit : 76df42e0e0ee68a3e694408b120623c563e7d179
Author : Jonathan Wright <jonathan@almalinux.org>
Date : 2026-08-03T09:25:42-05:00
Stats : +17/-14 in 4 file(s)
URL : https://src.fedoraproject.org/rpms/vaultwarden/c/76df42e0e0ee68a3e694408b120623c563e7d179?branch=epel10
Log:
update to 1.37.1 rhbz#2510094
Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities
---
diff --git a/.gitignore b/.gitignore
index a1bf554..7f7fca5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,5 @@
/vaultwarden-1.34.2-vendor.tar.xz
/vaultwarden-1.36.0.tar.gz
/vaultwarden-1.36.0-vendor.tar.xz
+/vaultwarden-1.37.1.tar.gz
+/vaultwarden-1.37.1-vendor.tar.xz
diff --git a/lower-rust-version.patch b/lower-rust-version.patch
index 4897c58..d65c5a5 100644
--- a/lower-rust-version.patch
+++ b/lower-rust-version.patch
@@ -1,11 +1,11 @@
-Lower the minimum supported Rust version from 1.93.0 to 1.92.0.
+Lower the minimum supported Rust version from 1.95.0 to 1.92.0.
EPEL branches ship an older Rust toolchain (1.92.0) than upstream's declared
-minimum (1.93.0), which makes cargo refuse to build:
+minimum (1.95.0), which makes cargo refuse to build:
error: rustc 1.92.0 is not supported by the following packages:
- macros@0.1.0 requires rustc 1.93.0
- vaultwarden@1.0.0 requires rustc 1.93.0
+ macros@0.1.0 requires rustc 1.95.0
+ vaultwarden@1.0.0 requires rustc 1.95.0
Both the vaultwarden crate and the macros workspace member inherit
rust-version from [workspace.package], so lowering it there is sufficient.
@@ -15,8 +15,8 @@ diff --git a/Cargo.toml b/Cargo.toml
+++ b/Cargo.toml
@@ -1,5 +1,5 @@
[workspace.package]
- edition = "2021"
--rust-version = "1.93.0"
+ edition = "2024"
+-rust-version = "1.95.0"
+rust-version = "1.92.0"
license = "AGPL-3.0-only"
repository = "https://github.com/dani-garcia/vaultwarden"
diff --git a/sources b/sources
index da79bd5..ada25a3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (vaultwarden-1.36.0.tar.gz) = 59b7be22504826a5b3cb7c30d84c2648d80af5bf003b16512401dd734baf05a208651cdd49bc79120a85e43c92df303f2f501521161b7e550c44ffeccb3e5923
-SHA512 (vaultwarden-1.36.0-vendor.tar.xz) = c889f1bf0f9e0ae2d92e4173b0673d6dc926fe5c1e74860c465e9884ba2f8d7ba37075fb0e49e4b1c47d8da2e43b4bc07cf404ed7953edaf2e583060ac0f5684
+SHA512 (vaultwarden-1.37.1.tar.gz) = 251323087e4b5b0b7b8f4261a6cd6fd5ac833eb29b3fc2e3365f2dd169f2e6852534ef9c3f1b3f18146c76538a028a09836e2babf32cde4672b88d9399c5f326
+SHA512 (vaultwarden-1.37.1-vendor.tar.xz) = 45ae98b7efbe1f3bc026cc09bbfea7a616669173e72e766b200d209704809ad6dc74b18103bc8e0ef91d9c4d9a85bb03734bee3fbec29c1b7822303a403241f6
diff --git a/vaultwarden.spec b/vaultwarden.spec
index 1cf15c1..9e7d446 100644
--- a/vaultwarden.spec
+++ b/vaultwarden.spec
@@ -9,8 +9,8 @@
%global rustflags_debuginfo 1
Name: vaultwarden
-Version: 1.36.0
-Release: 3%{?dist}
+Version: 1.37.1
+Release: 1%{?dist}
Summary: Unofficial Bitwarden compatible server
ExcludeArch: ppc64le s390x
@@ -30,10 +30,6 @@ ExcludeArch: ppc64le s390x
# BSD-2-Clause OR Apache-2.0 OR MIT
# BSD-3-Clause
# BSD-3-Clause AND MIT
-# BSD-3-Clause OR MIT
-# CDLA-Permissive-2.0
-# ISC
-# MIT
# MIT OR Apache-2.0
# MIT OR Apache-2.0 OR BSD-1-Clause
# MIT OR Apache-2.0 OR LGPL-2.1-or-later
@@ -157,6 +153,11 @@ install -Dp %{SOURCE2} %{buildroot}%{_unitdir}/%{name}.service
%changelog
+* Mon Aug 03 2026 Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1
+- update to 1.37.1 rhbz#2510094
+- Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
+- Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities
+
* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.36.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
reply other threads:[~2026-08-03 14:28 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178576731130.1.9124185119249211228.rpms-vaultwarden-76df42e0e0ee@fedoraproject.org \
--to=jonathan@almalinux.org \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox