Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package go-containerregistry for
openSUSE:Factory checked in at 2026-10-28 21:32:11
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/go-containerregistry (Old)
and /work/SRC/openSUSE:Factory/.go-containerregistry.new.2252680 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go-containerregistry"
Wed Oct 28 21:32:11 2026 rev:19 rq:1393465 version:0.22.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/go-containerregistry/go-containerregistry.changes
2026-10-02 23:08:53.693252858 +0200
+++
/work/SRC/openSUSE:Factory/.go-containerregistry.new.2252680/go-containerregistry.changes
2026-10-28 21:32:17.822267240 +0100
@@ -1,0 +2,8 @@
+Wed Oct 28 18:38:55 UTC 2026 - Dirk Müller <[email protected]>
+
+- update vendor.tar to address:
+ * bsc#1288488, CVE-2026-116591: github.com/klauspost/compress/zstd:
+ crafted ~27 KB two-block zstd frame makes DecodeAll and the
+ streaming decoder panic
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ _service ++++++
--- /var/tmp/diff_new_pack.OtyE1i/_old 2026-10-28 21:32:18.492295020 +0100
+++ /var/tmp/diff_new_pack.OtyE1i/_new 2026-10-28 21:32:18.498295269 +0100
@@ -2,6 +2,7 @@
<service name="download_files" mode="manual"/>
<service name="go_modules" mode="manual">
<param name="replace">golang.org/x/mod=golang.org/x/[email protected]</param>
+ <param
name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param>
</service>
</services>
++++++ vendor.tar.gz ++++++
++++ 13876 lines of diff (skipped)
