Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cadvisor for openSUSE:Factory checked in at 2026-09-07 15:49:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cadvisor (Old) and /work/SRC/openSUSE:Factory/.cadvisor.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cadvisor" Mon Sep 7 15:49:55 2026 rev:8 rq:1376028 version:0.60.5 Changes: -------- --- /work/SRC/openSUSE:Factory/cadvisor/cadvisor.changes 2026-08-26 19:54:21.980104063 +0200 +++ /work/SRC/openSUSE:Factory/.cadvisor.new.1265/cadvisor.changes 2026-09-07 15:49:56.968346629 +0200 @@ -1,0 +2,10 @@ +Wed Sep 2 19:24:49 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to fix + * bsc#1279044, CVE-2026-84445 + * bsc#1279224, CVE-2026-84304 + * bsc#1279320, CVE-2026-84303: cadvisor: google.golang.org/grpc: + xDS RBAC HTTP filter implementation issue allows for bypass + of authorization policies + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.5P1VKo/_old 2026-09-07 15:50:01.022516160 +0200 +++ /var/tmp/diff_new_pack.5P1VKo/_new 2026-09-07 15:50:01.031516537 +0200 @@ -4,6 +4,7 @@ <param name="subdir">cmd</param> <param name="compression">zst</param> <param name="replace">go.opentelemetry.io/otel=go.opentelemetry.io/[email protected]</param> + <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> </service> <service name="set_version" mode="manual"> <param name="basename">cadvisor</param> ++++++ vendor.tar.zst ++++++ ++++ 8297 lines of diff (skipped)
