Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kubevirt1.8 for openSUSE:Factory checked in at 2026-10-23 20:28:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubevirt1.8 (Old) and /work/SRC/openSUSE:Factory/.kubevirt1.8.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubevirt1.8" Fri Oct 23 20:28:16 2026 rev:9 rq:1387191 version:1.8.4 Changes: -------- --- /work/SRC/openSUSE:Factory/kubevirt1.8/kubevirt1.8.changes 2026-10-22 15:54:47.230398203 +0200 +++ /work/SRC/openSUSE:Factory/.kubevirt1.8.new.2252680/kubevirt1.8.changes 2026-10-23 20:29:04.294522197 +0200 @@ -1,0 +2,15 @@ +Wed Oct 21 21:29:07 UTC 2026 - Victor Carvalho <[email protected]> + +- Re-vendor the Go dependencies for the open security bugs: + * golang.org/x/net 0.60.0: CVE-2026-78669 (bsc#1285255) excessive CPU + from repeated HTTP/2 initial window changes; also CVE-2026-78659, + CVE-2026-78660, CVE-2026-78663 and CVE-2026-97032 fixed in that release + * golang.org/x/crypto 0.57.0: CVE-2026-56854, CVE-2026-56855 and + CVE-2026-78662 (bsc#1278574) ssh authentication bypass and deadlocks + * google.golang.org/grpc 1.83.2: CVE-2026-84445 (bsc#1278869) crash on + requests without :authority and Host headers, CVE-2026-84304 + (bsc#1279184) HTTP/2 DATA fragment memory exhaustion, CVE-2026-84303 + (bsc#1279276) xDS RBAC header matcher bypass +- Build with Go 1.26: the updated modules require it (go.mod) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubevirt1.8.spec ++++++ --- /var/tmp/diff_new_pack.MCa5Sm/_old 2026-10-23 20:29:05.022552969 +0200 +++ /var/tmp/diff_new_pack.MCa5Sm/_new 2026-10-23 20:29:05.024553054 +0200 @@ -41,7 +41,7 @@ BuildRequires: pkgconfig BuildRequires: rsync BuildRequires: sed -BuildRequires: golang(API) >= 1.25 +BuildRequires: golang(API) >= 1.26 BuildRequires: pkgconfig(libvirt) ExclusiveArch: %{_exclusive_arch} ++++++ kubevirt-1.8.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/kubevirt1.8/kubevirt-1.8.4.tar.gz /work/SRC/openSUSE:Factory/.kubevirt1.8.new.2252680/kubevirt-1.8.4.tar.gz differ: char 28, line 1
