Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package helm for openSUSE:Factory checked in at 2026-09-24 22:57:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/helm (Old) and /work/SRC/openSUSE:Factory/.helm.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "helm" Thu Sep 24 22:57:11 2026 rev:117 rq:1380038 version:4.3.0 Changes: -------- --- /work/SRC/openSUSE:Factory/helm/helm.changes 2026-09-22 15:51:15.727359517 +0200 +++ /work/SRC/openSUSE:Factory/.helm.new.383539/helm.changes 2026-09-24 22:59:51.770258244 +0200 @@ -1,0 +2,9 @@ +Wed Sep 23 20:37:03 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to address: + * bsc#1281468, CVE-2026-81871: OpenTelemetry-Go: TLS certificate + bypass allows log telemetry interception and alteration + * bsc#1281469, CVE-2026-81872: OpenTelemetry-Go: Denial of + Service via attacker-driven log emission + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.oNjEXm/_old 2026-09-24 22:59:53.821344013 +0200 +++ /var/tmp/diff_new_pack.oNjEXm/_new 2026-09-24 22:59:53.824344139 +0200 @@ -20,6 +20,13 @@ <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> <param name="replace">golang.org/x/mod=golang.org/x/[email protected]</param> <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/sdk/log=go.opentelemetry.io/otel/sdk/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/log=go.opentelemetry.io/otel/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/stdout/stdoutlog=go.opentelemetry.io/otel/exporters/stdout/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/stdout/stdoutlog=go.opentelemetry.io/otel/exporters/stdout/[email protected]</param> </service> </services> ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/helm/vendor.tar.zst /work/SRC/openSUSE:Factory/.helm.new.383539/vendor.tar.zst differ: char 7, line 1
