Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package helm for openSUSE:Factory checked in at 2026-10-14 18:35:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/helm (Old) and /work/SRC/openSUSE:Factory/.helm.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "helm" Wed Oct 14 18:35:36 2026 rev:119 rq:1384685 version:4.3.0 Changes: -------- --- /work/SRC/openSUSE:Factory/helm/helm.changes 2026-10-02 23:09:19.890348004 +0200 +++ /work/SRC/openSUSE:Factory/.helm.new.3698736/helm.changes 2026-10-14 18:36:31.476412121 +0200 @@ -1,0 +2,7 @@ +Tue Oct 13 21:18:02 UTC 2026 - Dirk Müller <[email protected]> + +- update vendor.tar to address: + * bsc#1285273, CVE-2026-78669: helm: golang.org/x/net/http2: + excessive CPU consumption from repeated initial window changes + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _service ++++++ --- /var/tmp/diff_new_pack.0kEvV2/_old 2026-10-14 18:36:32.847469847 +0200 +++ /var/tmp/diff_new_pack.0kEvV2/_new 2026-10-14 18:36:32.850469974 +0200 @@ -19,6 +19,7 @@ <param name="compression">zst</param> <param name="replace">golang.org/x/crypto=golang.org/x/[email protected]</param> <param name="replace">golang.org/x/mod=golang.org/x/[email protected]</param> + <param name="replace">golang.org/x/net=golang.org/x/[email protected]</param> <param name="replace">google.golang.org/grpc=google.golang.org/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/sdk/log=go.opentelemetry.io/otel/sdk/[email protected]</param> <param name="replace">go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp=go.opentelemetry.io/otel/exporters/otlp/otlplog/[email protected]</param> ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/helm/vendor.tar.zst /work/SRC/openSUSE:Factory/.helm.new.3698736/vendor.tar.zst differ: char 8, line 1
