Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package distribution for openSUSE:Factory checked in at 2026-09-07 15:50:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/distribution (Old) and /work/SRC/openSUSE:Factory/.distribution.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "distribution" Mon Sep 7 15:50:08 2026 rev:17 rq:1376026 version:3.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/distribution/distribution.changes 2026-08-26 19:54:24.865205959 +0200 +++ /work/SRC/openSUSE:Factory/.distribution.new.1265/distribution.changes 2026-09-07 15:50:11.300945969 +0200 @@ -1,0 +2,17 @@ +Sun Sep 6 15:24:27 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar: + * bsc#1277966, CVE-2026-37236: distribution: + github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can + override the HTTP method of a POST request through the + X-HTTP-Method-Override header + +------------------------------------------------------------------- +Wed Sep 2 19:24:49 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar: + * bsc#1278997, CVE-2026-84445 + * bsc#1279219, CVE-2026-84304 + * bsc#1279316, CVE-2026-84303 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.xwxmVL/_old 2026-09-07 15:50:14.468078408 +0200 +++ /var/tmp/diff_new_pack.xwxmVL/_new 2026-09-07 15:50:14.473078617 +0200 @@ -14,7 +14,10 @@ <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> <param name="replace">golang.org/x/text=golang.org/x/[email protected]</param> <param name="replace">go.opentelemetry.io/otel=go.opentelemetry.io/[email protected]</param> - </service> + <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> + <param name="replace">cloud.google.com/go/auth=cloud.google.com/go/[email protected]</param> + <param name="replace">github.com/grpc-ecosystem/grpc-gateway/v2=github.com/grpc-ecosystem/grpc-gateway/[email protected]</param> + </service> <service name="recompress" mode="manual"> <param name="file">distribution-*.tar</param> <param name="compression">zstd</param> ++++++ vendor.tar.zst ++++++ ++++ 171162 lines of diff (skipped)
