Security update for restic SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2025:0110-1 Final 1 1 2025-03-31T12:01:10Z current 2025-03-31T12:01:10Z 2025-03-31T12:01:10Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for restic This update for restic fixes the following issues: Update to 0.18.0 - Sec #5291: Mitigate attack on content-defined chunking algorithm - Fix #1843: Correctly restore long filepaths' timestamp on old Windows - Fix #2165: Ignore disappeared backup source files - Fix #5153: Include root tree when searching using find --tree - Fix #5169: Prevent Windows VSS event log 8194 warnings for backup with fs snapshot - Fix #5212: Fix duplicate data handling in prune --max-unused - Fix #5249: Fix creation of oversized index by repair index --read-all-packs - Fix #5259: Fix rare crash in command output - Chg #4938: Update dependencies and require Go 1.23 or newer - Chg #5162: Promote feature flags - Enh #1378: Add JSON support to check command - Enh #2511: Support generating shell completions to stdout - Enh #3697: Allow excluding online-only cloud files (e.g. OneDrive) - Enh #4179: Add sort option to ls command - Enh #4433: Change default sort order for find output - Enh #4521: Add support for Microsoft Blob Storage access tiers - Enh #4942: Add snapshot summary statistics to rewritten snapshots - Enh #4948: Format exit errors as JSON when requested - Enh #4983: Add SLSA provenance to GHCR container images - Enh #5054: Enable compression for ZIP archives in dump command - Enh #5081: Add retry mechanism for loading repository config - Enh #5089: Allow including/excluding extended file attributes during restore - Enh #5092: Show count of deleted files and directories during restore - Enh #5109: Make small pack size configurable for prune - Enh #5119: Add start and end timestamps to backup JSON output - Enh #5131: Add DragonFlyBSD support - Enh #5137: Make tag command print which snapshots were modified - Enh #5141: Provide clear error message if AZURE_ACCOUNT_NAME is not set - Enh #5173: Add experimental S3 cold storage support - Enh #5174: Add xattr support for NetBSD 10+ - Enh #5251: Improve retry handling for flaky rclone backends - Enh #52897: Make recover automatically rebuild index when needed The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2025-110 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/774IYQZ7MM6B6XG4OUL4ZECAW4Q5WNZN/ E-Mail link for openSUSE-SU-2025:0110-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP6 openSUSE Leap 15.6 restic-0.18.0-bp156.2.6.1 restic-bash-completion-0.18.0-bp156.2.6.1 restic-zsh-completion-0.18.0-bp156.2.6.1 restic-0.18.0-bp156.2.6.1 as a component of SUSE Package Hub 15 SP6 restic-bash-completion-0.18.0-bp156.2.6.1 as a component of SUSE Package Hub 15 SP6 restic-zsh-completion-0.18.0-bp156.2.6.1 as a component of SUSE Package Hub 15 SP6 restic-0.18.0-bp156.2.6.1 as a component of openSUSE Leap 15.6 restic-bash-completion-0.18.0-bp156.2.6.1 as a component of openSUSE Leap 15.6 restic-zsh-completion-0.18.0-bp156.2.6.1 as a component of openSUSE Leap 15.6