Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package distribution for openSUSE:Factory checked in at 2026-10-02 23:05:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/distribution (Old) and /work/SRC/openSUSE:Factory/.distribution.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "distribution" Fri Oct 2 23:05:35 2026 rev:20 rq:1382117 version:3.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/distribution/distribution.changes 2026-09-24 22:59:54.267362664 +0200 +++ /work/SRC/openSUSE:Factory/.distribution.new.1631729/distribution.changes 2026-10-02 23:08:06.884296052 +0200 @@ -1,0 +2,7 @@ +Fri Oct 2 13:40:04 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar: + * bsc#1283762, CVE-2026-63209: distribution: + github.com/klauspost/compress: signed integer overflow in s2.NewDict() + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.E06nfU/_old 2026-10-02 23:08:08.558366035 +0200 +++ /var/tmp/diff_new_pack.E06nfU/_new 2026-10-02 23:08:08.563366245 +0200 @@ -16,6 +16,7 @@ <param name="replace">go.opentelemetry.io/otel=go.opentelemetry.io/[email protected]</param> <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> <param name="replace">cloud.google.com/go/auth=cloud.google.com/go/[email protected]</param> + <param name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param> <param name="replace">github.com/grpc-ecosystem/grpc-gateway/v2=github.com/grpc-ecosystem/grpc-gateway/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/sdk/log=go.opentelemetry.io/otel/sdk/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> ++++++ vendor.tar.zst ++++++ ++++ 2147 lines of diff (skipped)
