Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package containerized-data-importer1.66 for
openSUSE:Factory checked in at 2026-09-09 16:20:07
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/containerized-data-importer1.66 (Old)
and /work/SRC/openSUSE:Factory/.containerized-data-importer1.66.new.1265
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "containerized-data-importer1.66"
Wed Sep 9 16:20:07 2026 rev:2 rq:1376507 version:1.66.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/containerized-data-importer1.66/containerized-data-importer1.66.changes
2026-08-14 22:05:12.760215667 +0200
+++
/work/SRC/openSUSE:Factory/.containerized-data-importer1.66.new.1265/containerized-data-importer1.66.changes
2026-09-09 16:22:33.558547366 +0200
@@ -1,0 +2,26 @@
+Mon Sep 7 13:17:12 UTC 2026 - Victor Carvalho <[email protected]>
+
+- Update to version 1.66.1
+ Release notes
+
https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.66.1
+ * import into 4k-sector block devices no longer fails (qemu fix
+ pulled into the importer image build)
+ * nbdkit nfc support for vSphere disk imports
+ * minimum PVC size for the HPE XP and Hitachi HSPC provisioners
+- Security: re-vendor the bundled Go dependencies (tarball rebuilt
+ from v1.66.1 with updated go.mod/vendor; no upstream source changes).
+ v1.66.1 ships the same pristine vendor tree as v1.66.0, so this
+ carries the 1.66.0 bumps forward and adds:
+ * google.golang.org/grpc v1.79.3 -> v1.83.1: CVE-2026-84304
+ (bsc#1279234), CVE-2026-84303 (bsc#1279315)
+ * golang.org/x/crypto v0.54.0 -> v0.56.0: CVE-2026-56854,
+ CVE-2026-56855, CVE-2026-78662 (bsc#1278621)
+ * go.opentelemetry.io/otel v1.39.0 -> v1.44.0: CVE-2026-41178
+ (bsc#1276687)
+ * golang.org/x/text v0.40.0 -> v0.41.0 (required by x/crypto 0.56.0)
+ Carried forward from the 1.66.0 re-vendor: golang.org/x/net v0.57.0,
+ github.com/moby/spdystream v0.5.1, github.com/ulikunitz/xz v0.5.15,
+ github.com/go-jose/go-jose/v3 v3.0.5.
+- Build with Go 1.26 (golang.org/x/crypto 0.56.0 requires it).
+
+-------------------------------------------------------------------
Old:
----
containerized-data-importer-1.66.0.tar.gz
New:
----
containerized-data-importer-1.66.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ containerized-data-importer1.66.spec ++++++
--- /var/tmp/diff_new_pack.ocGb8b/_old 2026-09-09 16:22:35.387623809 +0200
+++ /var/tmp/diff_new_pack.ocGb8b/_new 2026-09-09 16:22:35.390623935 +0200
@@ -31,7 +31,7 @@
%define upstream_name containerized-data-importer
Name: containerized-data-importer1.66
-Version: 1.66.0
+Version: 1.66.1
Release: 0
Summary: Container native virtualization
License: Apache-2.0
@@ -49,7 +49,7 @@
BuildRequires: pkgconfig
BuildRequires: rsync
BuildRequires: sed
-BuildRequires: golang(API) >= 1.25
+BuildRequires: golang(API) >= 1.26
ExclusiveArch: %{_exclusive_arch}
%description
++++++ _service ++++++
--- /var/tmp/diff_new_pack.ocGb8b/_old 2026-09-09 16:22:35.471627320 +0200
+++ /var/tmp/diff_new_pack.ocGb8b/_new 2026-09-09 16:22:35.475627487 +0200
@@ -1,7 +1,7 @@
<services>
<service name="tar_scm" mode="manual">
<param name="filename">containerized-data-importer</param>
- <param name="revision">v1.66.0</param>
+ <param name="revision">v1.66.1</param>
<param name="scm">git</param>
<param name="submodules">disable</param>
<param
name="url">https://github.com/kubevirt/containerized-data-importer</param>
++++++ containerized-data-importer-1.66.0.tar.gz ->
containerized-data-importer-1.66.1.tar.gz ++++++
/work/SRC/openSUSE:Factory/containerized-data-importer1.66/containerized-data-importer-1.66.0.tar.gz
/work/SRC/openSUSE:Factory/.containerized-data-importer1.66.new.1265/containerized-data-importer-1.66.1.tar.gz
differ: char 9, line 1
