Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package distribution for openSUSE:Factory checked in at 2026-10-28 20:24:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/distribution (Old) and /work/SRC/openSUSE:Factory/.distribution.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "distribution" Wed Oct 28 20:24:12 2026 rev:24 rq:1393458 version:3.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/distribution/distribution.changes 2026-10-27 17:09:52.277021226 +0100 +++ /work/SRC/openSUSE:Factory/.distribution.new.2252680/distribution.changes 2026-10-28 20:24:14.449099002 +0100 @@ -1,0 +2,8 @@ +Wed Oct 28 17:45:05 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to address: + * bsc#1288598, CVE-2026-116591: github.com/klauspost/compress/zstd: + crafted ~27 KB two-block zstd frame makes DecodeAll and the + streaming decoder panic + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.6LrZ85/_old 2026-10-28 20:24:15.413139332 +0100 +++ /var/tmp/diff_new_pack.6LrZ85/_new 2026-10-28 20:24:15.416139457 +0100 @@ -13,7 +13,7 @@ <param name="replace">go.opentelemetry.io/otel=go.opentelemetry.io/[email protected]</param> <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> <param name="replace">cloud.google.com/go/auth=cloud.google.com/go/[email protected]</param> - <param name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param> + <param name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlptrace=go.opentelemetry.io/otel/exporters/otlp/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc=go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp=go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected]</param> ++++++ vendor.tar.zst ++++++ ++++ 15831 lines of diff (skipped)
