Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hauler for openSUSE:Factory checked in at 2026-10-28 21:32:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hauler (Old) and /work/SRC/openSUSE:Factory/.hauler.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hauler" Wed Oct 28 21:32:07 2026 rev:30 rq:1393463 version:2.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/hauler/hauler.changes 2026-10-27 17:08:55.555645322 +0100 +++ /work/SRC/openSUSE:Factory/.hauler.new.2252680/hauler.changes 2026-10-28 21:32:16.173198868 +0100 @@ -1,0 +2,8 @@ +Wed Oct 28 18:29:02 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to address: + * bsc#1288488, CVE-2026-116591, github.com/klauspost/compress/zstd: + crafted ~27 KB two-block zstd frame makes DecodeAll and the + streaming decoder panic + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.XFGt8K/_old 2026-10-28 21:32:17.108237635 +0100 +++ /var/tmp/diff_new_pack.XFGt8K/_new 2026-10-28 21:32:17.113237843 +0100 @@ -3,6 +3,7 @@ <service name="go_modules" mode="manual"> <param name="compression">zst</param> <param name="replace">github.com/go-chi/chi/v5=github.com/go-chi/chi/[email protected]</param> + <param name="replace">github.com/klauspost/compress=github.com/klauspost/[email protected]</param> </service> </services> ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/hauler/vendor.tar.zst /work/SRC/openSUSE:Factory/.hauler.new.2252680/vendor.tar.zst differ: char 7, line 1
