Packages / openSUSE Tumbleweed / Unspecified / git-bug

Package: git-bug (0.10.1-6.3)

Distributed, offline-first bug tracker embedded in git, with bridges

git-bug is a bug tracker that: * is fully embedded in git: you only need your git repository to have a bug tracker * is distributed: use your normal git remote to collaborate, push and pull your bugs! * works offline: in a plane or under the sea? Keep reading and writing bugs! * prevents vendor lock-in: your usual service is down or went bad? You already have a full backup. * is fast: listing bugs or opening them is a matter of milliseconds * doesn't pollute your project: no files are added in your project * integrates with your tooling: use the UI you like (CLI, terminal, web) or integrate with your existing tools through the CLI or the GraphQL API * bridges to other bug trackers: use bridges to import and export to other trackers.

Other Packages Related to git-bug:

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download git-bug

ArchitecturePackage sizeInstalled sizeFilesPackage
x86_648.7 MiB31 MiBlist of filesDownload

Package file paths (44)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/git-bug
  • /usr/share/doc/packages/git-bug
  • /usr/share/doc/packages/git-bug/README.md
  • /usr/share/licenses/git-bug
  • /usr/share/licenses/git-bug/LICENSE
  • /usr/share/man/man1/git-bug.1.gz
  • /usr/share/man/man1/git-bug-bridge.1.gz
  • /usr/share/man/man1/git-bug-bridge-auth.1.gz
  • /usr/share/man/man1/git-bug-bridge-auth-add-token.1.gz
  • /usr/share/man/man1/git-bug-bridge-auth-rm.1.gz
  • /usr/share/man/man1/git-bug-bridge-auth-show.1.gz
  • /usr/share/man/man1/git-bug-bridge-new.1.gz
  • /usr/share/man/man1/git-bug-bridge-pull.1.gz
  • /usr/share/man/man1/git-bug-bridge-push.1.gz
  • /usr/share/man/man1/git-bug-bridge-rm.1.gz
  • /usr/share/man/man1/git-bug-bug.1.gz
  • /usr/share/man/man1/git-bug-bug-comment.1.gz
  • /usr/share/man/man1/git-bug-bug-comment-edit.1.gz
  • /usr/share/man/man1/git-bug-bug-comment-new.1.gz
  • /usr/share/man/man1/git-bug-bug-deselect.1.gz
  • /usr/share/man/man1/git-bug-bug-label.1.gz
  • /usr/share/man/man1/git-bug-bug-label-new.1.gz
  • /usr/share/man/man1/git-bug-bug-label-rm.1.gz
  • /usr/share/man/man1/git-bug-bug-new.1.gz
  • /usr/share/man/man1/git-bug-bug-rm.1.gz
  • /usr/share/man/man1/git-bug-bug-select.1.gz
  • /usr/share/man/man1/git-bug-bug-show.1.gz
  • /usr/share/man/man1/git-bug-bug-status.1.gz
  • /usr/share/man/man1/git-bug-bug-status-close.1.gz
  • /usr/share/man/man1/git-bug-bug-status-open.1.gz
  • /usr/share/man/man1/git-bug-bug-title.1.gz
  • /usr/share/man/man1/git-bug-bug-title-edit.1.gz
  • /usr/share/man/man1/git-bug-commands.1.gz
  • /usr/share/man/man1/git-bug-label.1.gz
  • /usr/share/man/man1/git-bug-pull.1.gz
  • /usr/share/man/man1/git-bug-push.1.gz
  • /usr/share/man/man1/git-bug-termui.1.gz
  • /usr/share/man/man1/git-bug-user.1.gz
  • /usr/share/man/man1/git-bug-user-adopt.1.gz
  • /usr/share/man/man1/git-bug-user-new.1.gz
  • /usr/share/man/man1/git-bug-user-user.1.gz
  • /usr/share/man/man1/git-bug-version.1.gz
  • /usr/share/man/man1/git-bug-webui.1.gz
  • /usr/share/man/man1/git-bug-wipe.1.gz

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.10.1-6.3tumbleweed / ossx86_64openSUSE Tumbleweed · OSS · multi-architecture8.7 MiB31 MiBx86_64/git-bug-0.10.1-6.3.x86_64.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-110095]

Published:

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and serialize() function

Low(3.7)Affected
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Affected · Fixed: 0.11.0-3.1

    nvd · git-bug · opensuse · tumbleweed

[CVE-2026-104844]

Published:

PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord() can receive a flat selector as one word token carrying

High(7.5)Affected
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Affected · Fixed: 0.11.0-2.1

    nvd · git-bug · opensuse · tumbleweed

[CVE-2026-56855]

Published:

golang-go.crypto: CVE-2026-56855

High(7.5)Affected
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Affected · Fixed: 0.10.1-7.1

    dsa · git-bug · opensuse · tumbleweed

Fixed and unaffected versions (7)
CVESeverityVersion impact
[CVE-2026-44740]

Published:

Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loop

High(7.5)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.10.1-6.1

    nvd · git-bug · opensuse · tumbleweed

[CVE-2026-25680]

Published:

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.

High(7.5)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.10.1-5.1

    nvd · git-bug · opensuse · tumbleweed

[CVE-2026-1229]

Published:

Security update for grafana

High(7)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.10.1-4.1

    pypi · git-bug · opensuse · tumbleweed

[CVE-2025-47913]

Published:

Go Cryptography vulnerabilities

High(7.5)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.10.1-3.1

    usn · git-bug · opensuse · tumbleweed

[CVE-2025-22869]

Published:

Go Cryptography vulnerabilities

High(7.5)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.8.0+git.1742269202.0ab94c9-1.1

    usn · git-bug · opensuse · tumbleweed

[CVE-2025-47911]

Published:

Go Networking vulnerabilities

Medium(5.3)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.10.1-2.1

    usn · git-bug · opensuse · tumbleweed

[CVE-2024-45337]

Published:

Google Guest Agent vulnerability

High(8.2)Fixed
Details (1)
  • 0.10.1-6.3 · x86_64 · tumbleweed

    Fixed · Fixed: 0.8.0+git.1733745604.d499b6e-1.1

    usn · git-bug · opensuse · tumbleweed

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

0.10.1-6.3 / x86_64Observed Sep 1, 2026sha512 c18924b8d675…d54e84f6Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): c18924b8d675bfa20db6099dc6c649775d0411d1e878d0cfedae180aff686a5afa5bbb49063c0427b17604cee3b02b9ba2e30f0c798920b815c849fad54e84f6

Field source: openSUSE Tumbleweed OSS

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable