Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cadvisor for openSUSE:Factory checked in at 2026-10-28 21:32:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cadvisor (Old) and /work/SRC/openSUSE:Factory/.cadvisor.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cadvisor" Wed Oct 28 21:32:05 2026 rev:13 rq:1393461 version:0.60.6 Changes: -------- --- /work/SRC/openSUSE:Factory/cadvisor/cadvisor.changes 2026-10-28 17:48:06.072964029 +0100 +++ /work/SRC/openSUSE:Factory/.cadvisor.new.2252680/cadvisor.changes 2026-10-28 21:32:13.965107318 +0100 @@ -1,0 +2,8 @@ +Wed Oct 28 18:27:59 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to address: + * bsc#1288588, CVE-2026-116591: github.com/klauspost/compress/zstd: + crafted ~27 KB two-block zstd frame makes DecodeAll and the + streaming decoder panic + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.No09cJ/_old 2026-10-28 21:32:14.646135554 +0100 +++ /var/tmp/diff_new_pack.No09cJ/_new 2026-10-28 21:32:14.652135803 +0100 @@ -6,7 +6,7 @@ <param name="replace">go.opentelemetry.io/otel=go.opentelemetry.io/[email protected]</param> <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> - <param name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param> + <param name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param> </service> <service name="set_version" mode="manual"> <param name="basename">cadvisor</param> ++++++ vendor.tar.zst ++++++ ++++ 15825 lines of diff (skipped)
