Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package etcd for openSUSE:Factory checked in at 2026-04-02 17:41:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/etcd (Old) and /work/SRC/openSUSE:Factory/.etcd.new.21863 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "etcd" Thu Apr 2 17:41:10 2026 rev:56 rq:1344213 version:3.6.10 Changes: -------- --- /work/SRC/openSUSE:Factory/etcd/etcd.changes 2026-03-22 14:12:46.126830554 +0100 +++ /work/SRC/openSUSE:Factory/.etcd.new.21863/etcd.changes 2026-04-02 17:42:09.273805837 +0200 @@ -1,0 +2,8 @@ +Wed Apr 01 19:40:42 UTC 2026 - Elisei Roca <[email protected]> + +- Update to version 3.6.10: + * etcdserver: allow non-admin to fetch member list and alarms + * Bump golang.org/x/image to v0.38.0 to resolve GO-2026-4815 + * Fix etcdctl endpoint command with option --cluster when auth is enabled + +------------------------------------------------------------------- Old: ---- etcd-3.6.9.tar.gz New: ---- etcd-3.6.10.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ etcd.spec ++++++ --- /var/tmp/diff_new_pack.HXd6BQ/_old 2026-04-02 17:42:10.277847304 +0200 +++ /var/tmp/diff_new_pack.HXd6BQ/_new 2026-04-02 17:42:10.281847470 +0200 @@ -23,7 +23,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: etcd -Version: 3.6.9 +Version: 3.6.10 Release: 0 Summary: Reliable key-value store for the most critical data of a distributed system License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.HXd6BQ/_old 2026-04-02 17:42:10.349850278 +0200 +++ /var/tmp/diff_new_pack.HXd6BQ/_new 2026-04-02 17:42:10.357850608 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/etcd-io/etcd.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v3.6.9</param> + <param name="revision">v3.6.10</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.HXd6BQ/_old 2026-04-02 17:42:10.377851435 +0200 +++ /var/tmp/diff_new_pack.HXd6BQ/_new 2026-04-02 17:42:10.381851600 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/etcd-io/etcd.git</param> - <param name="changesrevision">85651fa521731aaecad76ff81dee5450a766c874</param></service></servicedata> + <param name="changesrevision">db8d13a5421fcbd1c5825a148735b80c7d36cd2d</param></service></servicedata> (No newline at EOF) ++++++ etcd-3.6.9.tar.gz -> etcd-3.6.10.tar.gz ++++++ /work/SRC/openSUSE:Factory/etcd/etcd-3.6.9.tar.gz /work/SRC/openSUSE:Factory/.etcd.new.21863/etcd-3.6.10.tar.gz differ: char 12, line 1 ++++++ vendor-etcdctl.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/go.etcd.io/etcd/api/v3/version/version.go new/vendor/go.etcd.io/etcd/api/v3/version/version.go --- old/vendor/go.etcd.io/etcd/api/v3/version/version.go 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/go.etcd.io/etcd/api/v3/version/version.go 2026-04-01 20:29:49.000000000 +0200 @@ -26,7 +26,7 @@ var ( // MinClusterVersion is the min cluster version this etcd binary is compatible with. MinClusterVersion = "3.0.0" - Version = "3.6.9" + Version = "3.6.10" APIVersion = "unknown" // Git SHA Value will be set during build diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/modules.txt new/vendor/modules.txt --- old/vendor/modules.txt 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/modules.txt 2026-04-01 20:29:49.000000000 +0200 @@ -66,7 +66,7 @@ github.com/stretchr/testify/assert github.com/stretchr/testify/assert/yaml github.com/stretchr/testify/require -# go.etcd.io/etcd/api/v3 v3.6.9 => ../api +# go.etcd.io/etcd/api/v3 v3.6.10 => ../api ## explicit; go 1.25.0 go.etcd.io/etcd/api/v3/authpb go.etcd.io/etcd/api/v3/etcdserverpb @@ -75,7 +75,7 @@ go.etcd.io/etcd/api/v3/v3rpc/rpctypes go.etcd.io/etcd/api/v3/version go.etcd.io/etcd/api/v3/versionpb -# go.etcd.io/etcd/client/pkg/v3 v3.6.9 => ../client/pkg +# go.etcd.io/etcd/client/pkg/v3 v3.6.10 => ../client/pkg ## explicit; go 1.25.0 go.etcd.io/etcd/client/pkg/v3/fileutil go.etcd.io/etcd/client/pkg/v3/logutil @@ -85,7 +85,7 @@ go.etcd.io/etcd/client/pkg/v3/transport go.etcd.io/etcd/client/pkg/v3/types go.etcd.io/etcd/client/pkg/v3/verify -# go.etcd.io/etcd/client/v3 v3.6.9 => ../client/v3 +# go.etcd.io/etcd/client/v3 v3.6.10 => ../client/v3 ## explicit; go 1.25.0 go.etcd.io/etcd/client/v3 go.etcd.io/etcd/client/v3/concurrency @@ -94,7 +94,7 @@ go.etcd.io/etcd/client/v3/internal/resolver go.etcd.io/etcd/client/v3/mirror go.etcd.io/etcd/client/v3/snapshot -# go.etcd.io/etcd/pkg/v3 v3.6.9 => ../pkg +# go.etcd.io/etcd/pkg/v3 v3.6.10 => ../pkg ## explicit; go 1.25.0 go.etcd.io/etcd/pkg/v3/cobrautl go.etcd.io/etcd/pkg/v3/flags @@ -128,8 +128,8 @@ ## explicit; go 1.24.0 golang.org/x/sys/unix golang.org/x/sys/windows -# golang.org/x/text v0.34.0 -## explicit; go 1.24.0 +# golang.org/x/text v0.35.0 +## explicit; go 1.25.0 golang.org/x/text/secure/bidirule golang.org/x/text/transform golang.org/x/text/unicode/bidi ++++++ vendor-etcdutl.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/go.etcd.io/etcd/api/v3/version/version.go new/vendor/go.etcd.io/etcd/api/v3/version/version.go --- old/vendor/go.etcd.io/etcd/api/v3/version/version.go 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/go.etcd.io/etcd/api/v3/version/version.go 2026-04-01 20:29:49.000000000 +0200 @@ -26,7 +26,7 @@ var ( // MinClusterVersion is the min cluster version this etcd binary is compatible with. MinClusterVersion = "3.0.0" - Version = "3.6.9" + Version = "3.6.10" APIVersion = "unknown" // Git SHA Value will be set during build diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/auth.go new/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/auth.go --- old/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/auth.go 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/auth.go 2026-04-01 20:29:49.000000000 +0200 @@ -185,3 +185,19 @@ return aa.ag.AuthStore().IsAdminPermitted(authInfo) } + +func (aa *AuthAdmin) requireAuthInfo(ctx context.Context) error { + if !aa.ag.AuthStore().IsAuthEnabled() { + return nil + } + + authInfo, err := aa.ag.AuthInfoFromCtx(ctx) + if err != nil { + return err + } + + if authInfo == nil { + return auth.ErrUserEmpty + } + return nil +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/maintenance.go new/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/maintenance.go --- old/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/maintenance.go 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/go.etcd.io/etcd/server/v3/etcdserver/api/v3rpc/maintenance.go 2026-04-01 20:29:49.000000000 +0200 @@ -350,8 +350,15 @@ } func (ams *authMaintenanceServer) Alarm(ctx context.Context, ar *pb.AlarmRequest) (*pb.AlarmResponse, error) { - if err := ams.isPermitted(ctx); err != nil { - return nil, togRPCError(err) + switch ar.GetAction() { + case pb.AlarmRequest_GET: + if err := ams.requireAuthInfo(ctx); err != nil { + return nil, togRPCError(err) + } + default: + if err := ams.isPermitted(ctx); err != nil { + return nil, togRPCError(err) + } } return ams.maintenanceServer.Alarm(ctx, ar) } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/go.etcd.io/etcd/server/v3/etcdserver/server.go new/vendor/go.etcd.io/etcd/server/v3/etcdserver/server.go --- old/vendor/go.etcd.io/etcd/server/v3/etcdserver/server.go 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/go.etcd.io/etcd/server/v3/etcdserver/server.go 2026-04-01 20:29:49.000000000 +0200 @@ -1677,7 +1677,7 @@ } } - if err := s.checkMembershipOperationPermission(ctx); err != nil { + if err := s.requireAuthInfo(ctx); err != nil { return nil, err } return s.cluster.Members(), nil diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/modules.txt new/vendor/modules.txt --- old/vendor/modules.txt 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/modules.txt 2026-04-01 20:29:49.000000000 +0200 @@ -143,7 +143,7 @@ go.etcd.io/bbolt/errors go.etcd.io/bbolt/internal/common go.etcd.io/bbolt/internal/freelist -# go.etcd.io/etcd/api/v3 v3.6.9 => ../api +# go.etcd.io/etcd/api/v3 v3.6.10 => ../api ## explicit; go 1.25.0 go.etcd.io/etcd/api/v3/authpb go.etcd.io/etcd/api/v3/etcdserverpb @@ -153,7 +153,7 @@ go.etcd.io/etcd/api/v3/v3rpc/rpctypes go.etcd.io/etcd/api/v3/version go.etcd.io/etcd/api/v3/versionpb -# go.etcd.io/etcd/client/pkg/v3 v3.6.9 => ../client/pkg +# go.etcd.io/etcd/client/pkg/v3 v3.6.10 => ../client/pkg ## explicit; go 1.25.0 go.etcd.io/etcd/client/pkg/v3/fileutil go.etcd.io/etcd/client/pkg/v3/logutil @@ -164,7 +164,7 @@ go.etcd.io/etcd/client/pkg/v3/transport go.etcd.io/etcd/client/pkg/v3/types go.etcd.io/etcd/client/pkg/v3/verify -# go.etcd.io/etcd/client/v3 v3.6.9 => ../client/v3 +# go.etcd.io/etcd/client/v3 v3.6.10 => ../client/v3 ## explicit; go 1.25.0 go.etcd.io/etcd/client/v3 go.etcd.io/etcd/client/v3/concurrency @@ -172,7 +172,7 @@ go.etcd.io/etcd/client/v3/internal/endpoint go.etcd.io/etcd/client/v3/internal/resolver go.etcd.io/etcd/client/v3/snapshot -# go.etcd.io/etcd/pkg/v3 v3.6.9 => ../pkg +# go.etcd.io/etcd/pkg/v3 v3.6.10 => ../pkg ## explicit; go 1.25.0 go.etcd.io/etcd/pkg/v3/adt go.etcd.io/etcd/pkg/v3/cobrautl @@ -192,7 +192,7 @@ go.etcd.io/etcd/pkg/v3/schedule go.etcd.io/etcd/pkg/v3/traceutil go.etcd.io/etcd/pkg/v3/wait -# go.etcd.io/etcd/server/v3 v3.6.9 => ../server +# go.etcd.io/etcd/server/v3 v3.6.10 => ../server ## explicit; go 1.25.0 go.etcd.io/etcd/server/v3/auth go.etcd.io/etcd/server/v3/config @@ -341,8 +341,8 @@ golang.org/x/sys/unix golang.org/x/sys/windows golang.org/x/sys/windows/registry -# golang.org/x/text v0.34.0 -## explicit; go 1.24.0 +# golang.org/x/text v0.35.0 +## explicit; go 1.25.0 golang.org/x/text/secure/bidirule golang.org/x/text/transform golang.org/x/text/unicode/bidi ++++++ vendor-server.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/go.etcd.io/etcd/api/v3/version/version.go new/vendor/go.etcd.io/etcd/api/v3/version/version.go --- old/vendor/go.etcd.io/etcd/api/v3/version/version.go 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/go.etcd.io/etcd/api/v3/version/version.go 2026-04-01 20:29:49.000000000 +0200 @@ -26,7 +26,7 @@ var ( // MinClusterVersion is the min cluster version this etcd binary is compatible with. MinClusterVersion = "3.0.0" - Version = "3.6.9" + Version = "3.6.10" APIVersion = "unknown" // Git SHA Value will be set during build diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor/modules.txt new/vendor/modules.txt --- old/vendor/modules.txt 2026-03-20 19:04:03.000000000 +0100 +++ new/vendor/modules.txt 2026-04-01 20:29:49.000000000 +0200 @@ -156,7 +156,7 @@ go.etcd.io/bbolt/errors go.etcd.io/bbolt/internal/common go.etcd.io/bbolt/internal/freelist -# go.etcd.io/etcd/api/v3 v3.6.9 => ../api +# go.etcd.io/etcd/api/v3 v3.6.10 => ../api ## explicit; go 1.25.0 go.etcd.io/etcd/api/v3/authpb go.etcd.io/etcd/api/v3/etcdserverpb @@ -166,7 +166,7 @@ go.etcd.io/etcd/api/v3/v3rpc/rpctypes go.etcd.io/etcd/api/v3/version go.etcd.io/etcd/api/v3/versionpb -# go.etcd.io/etcd/client/pkg/v3 v3.6.9 => ../client/pkg +# go.etcd.io/etcd/client/pkg/v3 v3.6.10 => ../client/pkg ## explicit; go 1.25.0 go.etcd.io/etcd/client/pkg/v3/fileutil go.etcd.io/etcd/client/pkg/v3/logutil @@ -178,7 +178,7 @@ go.etcd.io/etcd/client/pkg/v3/transport go.etcd.io/etcd/client/pkg/v3/types go.etcd.io/etcd/client/pkg/v3/verify -# go.etcd.io/etcd/client/v3 v3.6.9 => ../client/v3 +# go.etcd.io/etcd/client/v3 v3.6.10 => ../client/v3 ## explicit; go 1.25.0 go.etcd.io/etcd/client/v3 go.etcd.io/etcd/client/v3/concurrency @@ -190,7 +190,7 @@ go.etcd.io/etcd/client/v3/naming/endpoints go.etcd.io/etcd/client/v3/naming/endpoints/internal go.etcd.io/etcd/client/v3/ordering -# go.etcd.io/etcd/pkg/v3 v3.6.9 => ../pkg +# go.etcd.io/etcd/pkg/v3 v3.6.10 => ../pkg ## explicit; go 1.25.0 go.etcd.io/etcd/pkg/v3/adt go.etcd.io/etcd/pkg/v3/contention @@ -314,8 +314,8 @@ golang.org/x/sys/unix golang.org/x/sys/windows golang.org/x/sys/windows/registry -# golang.org/x/text v0.34.0 -## explicit; go 1.24.0 +# golang.org/x/text v0.35.0 +## explicit; go 1.25.0 golang.org/x/text/secure/bidirule golang.org/x/text/transform golang.org/x/text/unicode/bidi
