Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kubevirt1.8 for openSUSE:Factory checked in at 2026-07-20 09:58:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kubevirt1.8 (Old) and /work/SRC/openSUSE:Factory/.kubevirt1.8.new.24530 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "kubevirt1.8" Mon Jul 20 09:58:33 2026 rev:4 rq:1366554 version:1.8.4 Changes: -------- --- /work/SRC/openSUSE:Factory/kubevirt1.8/kubevirt1.8.changes 2026-07-18 22:26:23.824927244 +0200 +++ /work/SRC/openSUSE:Factory/.kubevirt1.8.new.24530/kubevirt1.8.changes 2026-07-20 10:00:38.826769289 +0200 @@ -1,0 +2,16 @@ +Sat Jul 18 22:12:02 UTC 2026 - [email protected] + +- Security: re-vendor the bundled Go dependencies (no upstream source + changes; tarball rebuilt from v1.8.4 with updated go.mod/vendor): + * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736), + CVE-2026-39821 (bsc#1266575), CVE-2026-25680, CVE-2026-25681, + CVE-2026-27136, CVE-2026-42502, CVE-2026-42506 (bsc#1267120) + * golang.org/x/crypto v0.46.0 -> v0.52.0: CVE-2026-39827, + CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, + CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, + CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 + (bsc#1266151) +- Build with Go >= 1.25 (required by golang.org/x/net 0.55; go.mod and + go.work directives bumped accordingly). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kubevirt1.8.spec ++++++ --- /var/tmp/diff_new_pack.LrAbme/_old 2026-07-20 10:00:39.638796617 +0200 +++ /var/tmp/diff_new_pack.LrAbme/_new 2026-07-20 10:00:39.638796617 +0200 @@ -37,7 +37,7 @@ BuildRequires: pkgconfig BuildRequires: rsync BuildRequires: sed -BuildRequires: golang(API) >= 1.22 +BuildRequires: golang(API) >= 1.25 BuildRequires: pkgconfig(libvirt) ExclusiveArch: %{_exclusive_arch} ++++++ kubevirt-1.8.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/kubevirt1.8/kubevirt-1.8.4.tar.gz /work/SRC/openSUSE:Factory/.kubevirt1.8.new.24530/kubevirt-1.8.4.tar.gz differ: char 12, line 1
