Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package hauler for openSUSE:Factory checked in at 2026-08-22 21:35:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/hauler (Old) and /work/SRC/openSUSE:Factory/.hauler.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "hauler" Sat Aug 22 21:35:04 2026 rev:22 rq:1372935 version:2.0.3 Changes: -------- --- /work/SRC/openSUSE:Factory/hauler/hauler.changes 2026-07-17 18:51:47.361940236 +0200 +++ /work/SRC/openSUSE:Factory/.hauler.new.1258/hauler.changes 2026-08-22 21:37:13.884553179 +0200 @@ -1,0 +2,16 @@ +Fri Aug 21 20:24:04 UTC 2026 - Dirk Müller <[email protected]> + +- update to 2.0.3 (bsc#1276124, + CVE-2026-72817,CVE-2026-72815,CVE-2026-72816): + * Bump k8s.io/apimachinery from 0.36.2 to 0.36.3 (backport + #688) + * Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in the + go_modules group across 1 directory (backport #691) + * fix for homebrew macOS binary quarantine (backport #690) + * fix: process Helm deps before --add-images discovery + (backport #703) + * update hauler store remove to handle registry reference as + part of string (backport #705) + * fixed vuln for golang grpc + +------------------------------------------------------------------- @@ -9 +25,2 @@ -- update to 2.0.1 (bsc#1269433, CVE-2026-48702): +- update to 2.0.1 (bsc#1269433, CVE-2026-48702, + bsc#1265425, CVE-2026-41888): Old: ---- hauler-2.0.1.tar.gz New: ---- hauler-2.0.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ hauler.spec ++++++ --- /var/tmp/diff_new_pack.UiAC0n/_old 2026-08-22 21:37:14.913589963 +0200 +++ /var/tmp/diff_new_pack.UiAC0n/_new 2026-08-22 21:37:14.915590035 +0200 @@ -17,8 +17,8 @@ Name: hauler -Version: 2.0.1 -%global git_commit 4f47155d6f8ccec22ba6f609f2f1f4919b02fce1 +Version: 2.0.3 +%global git_commit 8d688ccee289e0770a1bf6a022cfd8c3a4625995 Release: 0 Summary: Airgap Swiss Army Knife License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.UiAC0n/_old 2026-08-22 21:37:14.956591500 +0200 +++ /var/tmp/diff_new_pack.UiAC0n/_new 2026-08-22 21:37:14.960591643 +0200 @@ -2,7 +2,6 @@ <service name="download_files" mode="manual"/> <service name="go_modules" mode="manual"> <param name="compression">zst</param> - <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> </service> </services> ++++++ hauler-2.0.1.tar.gz -> hauler-2.0.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/hauler/hauler-2.0.1.tar.gz /work/SRC/openSUSE:Factory/.hauler.new.1258/hauler-2.0.3.tar.gz differ: char 20, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/hauler/vendor.tar.zst /work/SRC/openSUSE:Factory/.hauler.new.1258/vendor.tar.zst differ: char 7, line 1
