Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kured for openSUSE:Factory checked in at 2026-10-26 09:58:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kured (Old) and /work/SRC/openSUSE:Factory/.kured.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kured" Mon Oct 26 09:58:54 2026 rev:28 rq:1392310 version:1.23.0 Changes: -------- --- /work/SRC/openSUSE:Factory/kured/kured.changes 2026-01-23 17:32:50.653388643 +0100 +++ /work/SRC/openSUSE:Factory/.kured.new.2252680/kured.changes 2026-10-26 09:59:01.947270781 +0100 @@ -1,0 +2,25 @@ +Sat Oct 24 17:56:43 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 1.23.0 (via 1.22.0 and 1.22.1): + * Kubernetes client libraries 0.34.3 -> 0.36.2; supports + Kubernetes 1.35, 1.36 and 1.37 + * Go toolchain directive 1.24 -> 1.26.4, including the + upstream update addressing CVE-2026-42504 + * Container registry made configurable; redundant DH_ORG + variable removed +- CVE-2025-47911, CVE-2025-58190: x/net/html parsing + complexity fixes via x/net 0.43.0 -> 0.55.0 + (bsc#1251430, bsc#1251610) +- CVE-2026-33814: x/net/http2 infinite loop on malformed + SETTINGS_MAX_FRAME_SIZE value (bsc#1265732) +- CVE-2026-39821: x/net/idna ASCII-only Punycode label + validation bypass (bsc#1266574) +- CVE-2025-22872 is not affected by this package (fixed in + x/net 0.38.0, older than the previously vendored 0.43.0) + (bsc#1241769) +- CVE-2022-21698 is not affected by this package + (client_golang 1.23.2, fixed upstream in 2022) (bsc#1248706) +- Refresh kured-imagePullPolicy.patch for the 1.22.1 yaml + context; drop Group: tags; require golang(API) >= 1.26 + +------------------------------------------------------------------- Old: ---- kured-1.21.0.tar.gz New: ---- kured-1.23.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kured.spec ++++++ --- /var/tmp/diff_new_pack.Yq2zz4/_old 2026-10-26 09:59:03.101319194 +0100 +++ /var/tmp/diff_new_pack.Yq2zz4/_new 2026-10-26 09:59:03.102319236 +0100 @@ -18,17 +18,16 @@ Name: kured -Version: 1.21.0 +Version: 1.23.0 Release: 0 Summary: Kubernetes daemonset to perform safe automatic node reboots License: Apache-2.0 -Group: System/Management URL: https://github.com/weaveworks/kured Source: %{name}-%{version}.tar.gz Source1: vendor.tar.gz Patch0: systemctl-path.patch Patch1: kured-imagePullPolicy.patch -BuildRequires: golang(API) >= 1.24 +BuildRequires: golang(API) >= 1.26 %description Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that @@ -45,7 +44,6 @@ %package k8s-yaml Summary: Kubernetes yaml file to run kured container -Group: System/Management BuildArch: noarch %description k8s-yaml ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Yq2zz4/_old 2026-10-26 09:59:03.139320788 +0100 +++ /var/tmp/diff_new_pack.Yq2zz4/_new 2026-10-26 09:59:03.145321040 +0100 @@ -6,7 +6,7 @@ <param name="filename">kured</param> <param name="changesgenerate">enable</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="revision">1.21.0</param> + <param name="revision">1.23.0</param> </service> <service name="set_version" mode="manual"/> <service name="recompress" mode="manual"> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Yq2zz4/_old 2026-10-26 09:59:03.176322341 +0100 +++ /var/tmp/diff_new_pack.Yq2zz4/_new 2026-10-26 09:59:03.179322467 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/weaveworks/kured.git</param> - <param name="changesrevision">779a3328671312eaef105190467a542c5863e91a</param></service></servicedata> + <param name="changesrevision">ef3c90b2bd58c0571e6eae7b893f0de3709cc98f</param></service></servicedata> (No newline at EOF) ++++++ kured-1.21.0.tar.gz -> kured-1.23.0.tar.gz ++++++ ++++ 2239 lines of diff (skipped) ++++++ kured-imagePullPolicy.patch ++++++ --- /var/tmp/diff_new_pack.Yq2zz4/_old 2026-10-26 09:59:03.284326872 +0100 +++ /var/tmp/diff_new_pack.Yq2zz4/_new 2026-10-26 09:59:03.287326998 +0100 @@ -15,7 +15,7 @@ @@ -39,7 +39,7 @@ spec: # If you find yourself here wondering why there is no # :latest tag on Docker Hub,see the FAQ in the README - image: ghcr.io/kubereboot/kured:1.21.0 + image: ghcr.io/kubereboot/kured:1.22.1 - imagePullPolicy: IfNotPresent + imagePullPolicy: Always securityContext: ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/kured/vendor.tar.gz /work/SRC/openSUSE:Factory/.kured.new.2252680/vendor.tar.gz differ: char 5, line 1
