Hello community,

here is the log from the commit of package helm for openSUSE:Factory checked in 
at 2018-12-24 11:46:42
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/helm (Old)
 and      /work/SRC/openSUSE:Factory/.helm.new.28833 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "helm"

Mon Dec 24 11:46:42 2018 rev:7 rq:660110 version:2.8.2

Changes:
--------
--- /work/SRC/openSUSE:Factory/helm/helm.changes        2018-12-13 
19:49:47.944595908 +0100
+++ /work/SRC/openSUSE:Factory/.helm.new.28833/helm.changes     2018-12-24 
11:46:43.761168736 +0100
@@ -1,0 +2,10 @@
+Wed Dec 19 01:36:13 UTC 2018 - [email protected]
+
+- Require golang >= 1.10.6 
+  * bsc#1118897 CVE-2018-16873
+    go#29230 cmd/go: remote command execution during "go get -u"
+  * bsc#1118898 CVE-2018-16874
+    go#29231 cmd/go: directory traversal in "go get" via curly braces in 
import paths
+  * bsc#1118899 CVE-2018-16875
+    go#29233 crypto/x509: CPU denial of service
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ helm.spec ++++++
--- /var/tmp/diff_new_pack.Usj9nu/_old  2018-12-24 11:46:44.701167910 +0100
+++ /var/tmp/diff_new_pack.Usj9nu/_new  2018-12-24 11:46:44.705167907 +0100
@@ -26,7 +26,7 @@
 URL:            https://github.com/kubernetes/helm
 Source:         %{name}-%{version}.tar.xz
 Source1:        vendor.tar.xz
-BuildRequires:  go >= 1.10
+BuildRequires:  go1.10 >= 1.10.6
 BuildRequires:  golang-packaging
 BuildRequires:  xz
 %{go_nostrip}


Reply via email to