openSUSE-SU-2025:0110-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2025:0110-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2025:0110-1
Published
2025-03-31T12:01:10Z
Modified
2025-03-31T12:01:10Z
Summary
Security update for restic
Details

This update for restic fixes the following issues:

Update to 0.18.0

  • Sec #5291: Mitigate attack on content-defined chunking algorithm
  • Fix #1843: Correctly restore long filepaths' timestamp on old Windows
  • Fix #2165: Ignore disappeared backup source files
  • Fix #5153: Include root tree when searching using find --tree
  • Fix #5169: Prevent Windows VSS event log 8194 warnings for backup with fs snapshot
  • Fix #5212: Fix duplicate data handling in prune --max-unused
  • Fix #5249: Fix creation of oversized index by repair index --read-all-packs
  • Fix #5259: Fix rare crash in command output
  • Chg #4938: Update dependencies and require Go 1.23 or newer
  • Chg #5162: Promote feature flags
  • Enh #1378: Add JSON support to check command
  • Enh #2511: Support generating shell completions to stdout
  • Enh #3697: Allow excluding online-only cloud files (e.g. OneDrive)
  • Enh #4179: Add sort option to ls command
  • Enh #4433: Change default sort order for find output
  • Enh #4521: Add support for Microsoft Blob Storage access tiers
  • Enh #4942: Add snapshot summary statistics to rewritten snapshots
  • Enh #4948: Format exit errors as JSON when requested
  • Enh #4983: Add SLSA provenance to GHCR container images
  • Enh #5054: Enable compression for ZIP archives in dump command
  • Enh #5081: Add retry mechanism for loading repository config
  • Enh #5089: Allow including/excluding extended file attributes during restore
  • Enh #5092: Show count of deleted files and directories during restore
  • Enh #5109: Make small pack size configurable for prune
  • Enh #5119: Add start and end timestamps to backup JSON output
  • Enh #5131: Add DragonFlyBSD support
  • Enh #5137: Make tag command print which snapshots were modified
  • Enh #5141: Provide clear error message if AZURE_ACCOUNT_NAME is not set
  • Enh #5173: Add experimental S3 cold storage support
  • Enh #5174: Add xattr support for NetBSD 10+
  • Enh #5251: Improve retry handling for flaky rclone backends
  • Enh #52897: Make recover automatically rebuild index when needed
References

Affected packages

SUSE:Package Hub 15 SP6 / restic

Package

Name
restic
Purl
pkg:rpm/suse/restic&distro=SUSE%20Package%20Hub%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.18.0-bp156.2.6.1

Ecosystem specific 

{
    "binaries":  [
        {
            "restic":  "0.18.0-bp156.2.6.1",
            "restic-bash-completion":  "0.18.0-bp156.2.6.1",
            "restic-zsh-completion":  "0.18.0-bp156.2.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2025:0110-1.json"

openSUSE:Leap 15.6 / restic

Package

Name
restic
Purl
pkg:rpm/opensuse/restic&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.18.0-bp156.2.6.1

Ecosystem specific 

{
    "binaries":  [
        {
            "restic":  "0.18.0-bp156.2.6.1",
            "restic-bash-completion":  "0.18.0-bp156.2.6.1",
            "restic-zsh-completion":  "0.18.0-bp156.2.6.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2025:0110-1.json"