Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package containerized-data-importer1.65 for
openSUSE:Factory checked in at 2026-10-23 20:28:19
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/containerized-data-importer1.65 (Old)
and
/work/SRC/openSUSE:Factory/.containerized-data-importer1.65.new.2252680 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "containerized-data-importer1.65"
Fri Oct 23 20:28:19 2026 rev:4 rq:1387194 version:1.65.0
Changes:
--------
---
/work/SRC/openSUSE:Factory/containerized-data-importer1.65/containerized-data-importer1.65.changes
2026-09-09 16:22:28.477335006 +0200
+++
/work/SRC/openSUSE:Factory/.containerized-data-importer1.65.new.2252680/containerized-data-importer1.65.changes
2026-10-23 20:29:17.517081088 +0200
@@ -1,0 +2,12 @@
+Wed Oct 21 21:29:34 UTC 2026 - Victor Carvalho <[email protected]>
+
+- Re-vendor the Go dependencies for the open security bugs:
+ * github.com/moby/sys/user 0.4.1: CVE-2026-61801 (bsc#1284883) unbounded
+ parsing of user and group databases
+ * golang.org/x/net 0.60.0: CVE-2026-78669 (bsc#1285502) excessive CPU
+ from repeated HTTP/2 initial window changes; also CVE-2026-78659,
+ CVE-2026-78660, CVE-2026-78663 and CVE-2026-97032 fixed in that release
+ * google.golang.org/grpc 1.83.2: CVE-2026-84445 (bsc#1278993) crash on
+ requests without :authority and Host headers
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ containerized-data-importer-1.65.0.tar.gz ++++++
/work/SRC/openSUSE:Factory/containerized-data-importer1.65/containerized-data-importer-1.65.0.tar.gz
/work/SRC/openSUSE:Factory/.containerized-data-importer1.65.new.2252680/containerized-data-importer-1.65.0.tar.gz
differ: char 9, line 1
