[rpms/vaultwarden] epel10.2: update to 1.37.1 rhbz#2510094

[rpms/vaultwarden] epel10.2: update to 1.37.1 rhbz#2510094

[Jonathan Wright]

            A new commit has been pushed.

            Repo   : rpms/vaultwarden
            Branch : epel10.2
            Commit : 76df42e0e0ee68a3e694408b120623c563e7d179
            Author : Jonathan Wright <jonathan@almalinux.org>
            Date   : 2026-08-03T09:25:42-05:00
            Stats  : +17/-14 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/vaultwarden/c/76df42e0e0ee68a3e694408b120623c563e7d179?branch=epel10.2

            Log:
            update to 1.37.1 rhbz#2510094
Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities

---
diff --git a/.gitignore b/.gitignore
index a1bf554..7f7fca5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,5 @@
 /vaultwarden-1.34.2-vendor.tar.xz
 /vaultwarden-1.36.0.tar.gz
 /vaultwarden-1.36.0-vendor.tar.xz
+/vaultwarden-1.37.1.tar.gz
+/vaultwarden-1.37.1-vendor.tar.xz

diff --git a/lower-rust-version.patch b/lower-rust-version.patch
index 4897c58..d65c5a5 100644
--- a/lower-rust-version.patch
+++ b/lower-rust-version.patch
@@ -1,11 +1,11 @@
-Lower the minimum supported Rust version from 1.93.0 to 1.92.0.
+Lower the minimum supported Rust version from 1.95.0 to 1.92.0.
 
 EPEL branches ship an older Rust toolchain (1.92.0) than upstream's declared
-minimum (1.93.0), which makes cargo refuse to build:
+minimum (1.95.0), which makes cargo refuse to build:
 
     error: rustc 1.92.0 is not supported by the following packages:
-      macros@0.1.0 requires rustc 1.93.0
-      vaultwarden@1.0.0 requires rustc 1.93.0
+      macros@0.1.0 requires rustc 1.95.0
+      vaultwarden@1.0.0 requires rustc 1.95.0
 
 Both the vaultwarden crate and the macros workspace member inherit
 rust-version from [workspace.package], so lowering it there is sufficient.
@@ -15,8 +15,8 @@ diff --git a/Cargo.toml b/Cargo.toml
 +++ b/Cargo.toml
 @@ -1,5 +1,5 @@
  [workspace.package]
- edition = "2021"
--rust-version = "1.93.0"
+ edition = "2024"
+-rust-version = "1.95.0"
 +rust-version = "1.92.0"
  license = "AGPL-3.0-only"
  repository = "https://github.com/dani-garcia/vaultwarden"

diff --git a/sources b/sources
index da79bd5..ada25a3 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (vaultwarden-1.36.0.tar.gz) = 59b7be22504826a5b3cb7c30d84c2648d80af5bf003b16512401dd734baf05a208651cdd49bc79120a85e43c92df303f2f501521161b7e550c44ffeccb3e5923
-SHA512 (vaultwarden-1.36.0-vendor.tar.xz) = c889f1bf0f9e0ae2d92e4173b0673d6dc926fe5c1e74860c465e9884ba2f8d7ba37075fb0e49e4b1c47d8da2e43b4bc07cf404ed7953edaf2e583060ac0f5684
+SHA512 (vaultwarden-1.37.1.tar.gz) = 251323087e4b5b0b7b8f4261a6cd6fd5ac833eb29b3fc2e3365f2dd169f2e6852534ef9c3f1b3f18146c76538a028a09836e2babf32cde4672b88d9399c5f326
+SHA512 (vaultwarden-1.37.1-vendor.tar.xz) = 45ae98b7efbe1f3bc026cc09bbfea7a616669173e72e766b200d209704809ad6dc74b18103bc8e0ef91d9c4d9a85bb03734bee3fbec29c1b7822303a403241f6

diff --git a/vaultwarden.spec b/vaultwarden.spec
index 1cf15c1..9e7d446 100644
--- a/vaultwarden.spec
+++ b/vaultwarden.spec
@@ -9,8 +9,8 @@
 %global rustflags_debuginfo 1
 
 Name:           vaultwarden
-Version:        1.36.0
-Release:        3%{?dist}
+Version:        1.37.1
+Release:        1%{?dist}
 Summary:        Unofficial Bitwarden compatible server
 
 ExcludeArch:    ppc64le s390x
@@ -30,10 +30,6 @@ ExcludeArch:    ppc64le s390x
 # BSD-2-Clause OR Apache-2.0 OR MIT
 # BSD-3-Clause
 # BSD-3-Clause AND MIT
-# BSD-3-Clause OR MIT
-# CDLA-Permissive-2.0
-# ISC
-# MIT
 # MIT OR Apache-2.0
 # MIT OR Apache-2.0 OR BSD-1-Clause
 # MIT OR Apache-2.0 OR LGPL-2.1-or-later
@@ -157,6 +153,11 @@ install -Dp %{SOURCE2} %{buildroot}%{_unitdir}/%{name}.service
 
 
 %changelog
+* Mon Aug 03 2026 Jonathan Wright <jonathan@almalinux.org> - 1.37.1-1
+- update to 1.37.1 rhbz#2510094
+- Fix CVE-2026-31812 vaultwarden: quinn-proto: Denial of Service via crafted QUIC Initial packet rhbz#2446376
+- Fix 8 cited but yet-to-be-listed medium-severity vulnerabilities
+
 * Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.36.0-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild