Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package helm3 for openSUSE:Factory checked in at 2026-09-28 10:47:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/helm3 (Old) and /work/SRC/openSUSE:Factory/.helm3.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "helm3" Mon Sep 28 10:47:21 2026 rev:25 rq:1380949 version:3.22.0 Changes: -------- --- /work/SRC/openSUSE:Factory/helm3/helm3.changes 2026-09-21 12:13:55.386974739 +0200 +++ /work/SRC/openSUSE:Factory/.helm3.new.383539/helm3.changes 2026-09-28 10:48:03.048970025 +0200 @@ -1,0 +2,9 @@ +Wed Sep 23 20:37:03 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to address: + * bsc#1281468, CVE-2026-81871: OpenTelemetry-Go: TLS certificate + bypass allows log telemetry interception and alteration + * bsc#1281469, CVE-2026-81872: OpenTelemetry-Go: Denial of + Service via attacker-driven log emission + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.48eOkX/_old 2026-09-28 10:48:04.427027761 +0200 +++ /var/tmp/diff_new_pack.48eOkX/_new 2026-09-28 10:48:04.431027928 +0200 @@ -15,6 +15,13 @@ <param name="compression">zst</param> <param name="replace">golang.org/x/mod=golang.org/x/[email protected]</param> <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/sdk/log=go.opentelemetry.io/otel/sdk/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/log=go.opentelemetry.io/otel/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/stdout/stdoutlog=go.opentelemetry.io/otel/exporters/stdout/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> + <param name="replace">go.opentelemetry.io/otel/exporters/stdout/stdoutlog=go.opentelemetry.io/otel/exporters/stdout/[email protected]</param> </service> <!-- services below are running at buildtime --> <service name="tar" mode="buildtime"> ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/helm3/vendor.tar.zst /work/SRC/openSUSE:Factory/.helm3.new.383539/vendor.tar.zst differ: char 8, line 1
