Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hauler for openSUSE:Factory checked in at 2026-10-27 17:08:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hauler (Old) and /work/SRC/openSUSE:Factory/.hauler.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hauler" Tue Oct 27 17:08:07 2026 rev:29 rq:1393072 version:2.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/hauler/hauler.changes 2026-10-20 12:37:38.925832891 +0200 +++ /work/SRC/openSUSE:Factory/.hauler.new.2252680/hauler.changes 2026-10-27 17:08:55.555645322 +0100 @@ -1,0 +2,8 @@ +Tue Oct 27 12:06:23 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor: + * CVE-2026-114437 (bsc#1287881): + github.com/go-chi/chi/v5: client IP spoofing in + `ClientIPFromXFF` via `X-Forwarded-For + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.EBev56/_old 2026-10-27 17:08:58.891785064 +0100 +++ /var/tmp/diff_new_pack.EBev56/_new 2026-10-27 17:08:58.896785273 +0100 @@ -2,6 +2,7 @@ <service name="download_files" mode="manual"/> <service name="go_modules" mode="manual"> <param name="compression">zst</param> + <param name="replace">github.com/go-chi/chi/v5=github.com/go-chi/chi/[email protected]</param> </service> </services> ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/hauler/vendor.tar.zst /work/SRC/openSUSE:Factory/.hauler.new.2252680/vendor.tar.zst differ: char 7, line 1
