Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package containerized-data-importer1.65 for
openSUSE:Factory checked in at 2026-09-09 16:20:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/containerized-data-importer1.65 (Old)
and /work/SRC/openSUSE:Factory/.containerized-data-importer1.65.new.1265
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "containerized-data-importer1.65"
Wed Sep 9 16:20:07 2026 rev:3 rq:1376503 version:1.65.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/containerized-data-importer1.65/containerized-data-importer1.65.changes
2026-07-18 22:26:40.069472578 +0200
+++
/work/SRC/openSUSE:Factory/.containerized-data-importer1.65.new.1265/containerized-data-importer1.65.changes
2026-09-09 16:22:28.477335006 +0200
@@ -1,0 +2,18 @@
+Mon Sep 7 13:24:45 UTC 2026 - Victor Carvalho <[email protected]>
+
+- Security: re-vendor the bundled Go dependencies (tarball rebuilt
+ from v1.65.0 with updated go.mod/vendor; no upstream source changes):
+ * google.golang.org/grpc v1.79.3 -> v1.83.1: CVE-2026-84304
+ (bsc#1279234), CVE-2026-84303 (bsc#1279315)
+ * golang.org/x/crypto v0.52.0 -> v0.56.0: CVE-2026-56854,
+ CVE-2026-56855, CVE-2026-78662 (bsc#1278621)
+ * golang.org/x/text v0.37.0 -> v0.41.0: CVE-2026-56852 (bsc#1272064)
+ * go.opentelemetry.io/otel v1.39.0 -> v1.44.0: CVE-2026-41178
+ (bsc#1276687)
+ * golang.org/x/net v0.55.0 -> v0.57.0 (no open CVE; aligns with
+ the other streams)
+ github.com/go-git/go-git and go-billy are not imported by any
+ module of the tree and are no longer vendored.
+- Build with Go 1.26 (golang.org/x/crypto 0.56.0 requires it).
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ containerized-data-importer1.65.spec ++++++
--- /var/tmp/diff_new_pack.MvI4YR/_old 2026-09-09 16:22:30.310411616 +0200
+++ /var/tmp/diff_new_pack.MvI4YR/_new 2026-09-09 16:22:30.313411742 +0200
@@ -46,7 +46,7 @@
BuildRequires: pkgconfig
BuildRequires: rsync
BuildRequires: sed
-BuildRequires: golang(API) >= 1.25
+BuildRequires: golang(API) >= 1.26
ExclusiveArch: %{_exclusive_arch}
%description
++++++ containerized-data-importer-1.65.0.tar.gz ++++++
/work/SRC/openSUSE:Factory/containerized-data-importer1.65/containerized-data-importer-1.65.0.tar.gz
/work/SRC/openSUSE:Factory/.containerized-data-importer1.65.new.1265/containerized-data-importer-1.65.0.tar.gz
differ: char 9, line 1
