Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package containerd for openSUSE:Factory checked in at 2026-10-18 19:22:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/containerd (Old) and /work/SRC/openSUSE:Factory/.containerd.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "containerd" Sun Oct 18 19:22:20 2026 rev:77 rq:1381592 version:2.3.3 Changes: -------- --- /work/SRC/openSUSE:Factory/containerd/containerd.changes 2026-06-23 17:36:50.997878679 +0200 +++ /work/SRC/openSUSE:Factory/.containerd.new.3698736/containerd.changes 2026-10-18 19:22:30.729740809 +0200 @@ -1,0 +2,35 @@ +Fri Jul 31 10:31:22 UTC 2026 - Madhankumar Chellamuthu <[email protected]> + +- Update to containerd v2.3.3, a major version upgrade from 1.7.33: + * https://github.com/containerd/containerd/releases/tag/v2.3.3 + +- Bump minimum Go version to 1.26, required by upstream go.mod (go 1.26.3) + +- Update Go import path to github.com/containerd/containerd/v2 to match + the module path change in containerd 2.x, and own the resulting + intermediate go_contribsrcdir directory in the devel package + +- Drop 0002-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch and + 0003-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch: both + fixes are already included upstream in v2.3.3 (golang.org/x/net is + pinned to the fixed v0.55.0, and the required go 1.26.3 toolchain + carries the http2 stdlib fix) + +- Rebase patches: + * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch + +------------------------------------------------------------------- +Thu Jul 16 09:45:53 UTC 2026 - Madhankumar Chellamuthu <[email protected]> + +- Remove invalid patch + * 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch + +- Add patches + * 0002-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch + * 0003-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch + +- Drop patches + * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch + * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch + +------------------------------------------------------------------- Old: ---- 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch containerd-1.7.33_e8b1a9bc2.tar.xz New: ---- containerd-2.3.3_aad11006b.tar.xz ----------(Old B)---------- Old:- Remove invalid patch * 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch Old:- Drop patches * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch Old: * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ containerd.spec ++++++ --- /var/tmp/diff_new_pack.ZBoLGk/_old 2026-10-18 19:22:31.446770536 +0200 +++ /var/tmp/diff_new_pack.ZBoLGk/_new 2026-10-18 19:22:31.448770619 +0200 @@ -23,14 +23,14 @@ %endif # MANUAL: Update the git_version. -%define git_version e8b1a9bc270f9952197c470b8bad573b03a3a608 -%define git_short e8b1a9bc2 +%define git_version aad11006b869517fcd3009450b6f82da282e1a9b +%define git_short aad11006b %global provider_prefix github.com/containerd/containerd -%global import_path %{provider_prefix} +%global import_path %{provider_prefix}/v2 Name: containerd -Version: 1.7.33 +Version: 2.3.3 Release: 0 Summary: Standalone OCI Container Daemon License: Apache-2.0 @@ -41,12 +41,9 @@ Source2: %{name}.service # UPSTREAM: Revert <https://github.com/containerd/containerd/pull/7933> to fix build on SLE-12. Patch1: 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch -Patch2: 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch -Patch4: 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch -Patch5: 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch BuildRequires: fdupes BuildRequires: glibc-devel-static -BuildRequires: go >= 1.22 +BuildRequires: go >= 1.26 BuildRequires: go-go-md2man BuildRequires: golang-packaging BuildRequires: libbtrfs-devel >= 3.8 @@ -106,9 +103,6 @@ %if 0%{?sle_version} == 120000 %patch -P 1 -p1 %endif -%patch -P 2 -p1 -%patch -P 4 -p1 -%patch -P 5 -p1 %build %goprep %{import_path} @@ -183,5 +177,6 @@ %license LICENSE %dir %{go_contribsrcdir}/github.com %dir %{go_contribsrcdir}/github.com/containerd +%dir %{go_contribsrcdir}/%{provider_prefix} %{go_contribsrcdir}/%{import_path} ++++++ 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch ++++++ ++++ 3636 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/containerd/0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch ++++ and /work/SRC/openSUSE:Factory/.containerd.new.3698736/0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ZBoLGk/_old 2026-10-18 19:22:31.496772609 +0200 +++ /var/tmp/diff_new_pack.ZBoLGk/_new 2026-10-18 19:22:31.501772816 +0200 @@ -3,8 +3,8 @@ <param name="url">https://github.com/containerd/containerd.git</param> <param name="scm">git</param> <param name="filename">containerd</param> - <param name="versionformat">1.7.33_%h</param> - <param name="revision">v1.7.33</param> + <param name="versionformat">2.3.3_%h</param> + <param name="revision">v2.3.3</param> <param name="exclude">.git</param> </service> <service name="recompress" mode="manual"> ++++++ containerd-1.7.33_e8b1a9bc2.tar.xz -> containerd-2.3.3_aad11006b.tar.xz ++++++ /work/SRC/openSUSE:Factory/containerd/containerd-1.7.33_e8b1a9bc2.tar.xz /work/SRC/openSUSE:Factory/.containerd.new.3698736/containerd-2.3.3_aad11006b.tar.xz differ: char 15, line 1
