{"old": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/harbor/old_rpms/", "new": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/harbor/new_rpms/", "compare_result": "not pass", "compare_details": {"same": {"same_details": {"old": [], "new": []}, "same_num": 0}, "diff": {"diff_details": {"harbor": {"name": {"old": "harbor-2.4.1-1.oe1.aarch64.rpm", "new": "harbor-2.4.1-2.oe1.aarch64.rpm"}, "RPM Level": "level4", "rpm requires": {"less": ["rpmlib(PayloadIsXz) <= 5.2", "ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)", "ld-linux-aarch64.so.1()(64bit)"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18", "libresolv.so.2()(64bit)", "rpmlib(PartialHardlinkSets) <= 4.0.4"]}, "rpm provides": {"more": ["bundled(golang(github.com/Microsoft/hcsshim)) = 0.8.14", "bundled(golang(github.com/stretchr/objx)) = 0.2.0", "bundled(golang(github.com/jinzhu/gorm)) = 1.9.8", "bundled(golang(google.golang.org/grpc)) = 1.40.0", "bundled(golang(github.com/cespare/xxhash/v2)) = 2.1.1", "bundled(golang(github.com/google/uuid)) = 1.1.2", "bundled(golang(github.com/beorn7/perks)) = 1.0.1", "bundled(golang(github.com/gosuri/uitable)) = 0.0.4", "bundled(golang(github.com/Azure/go.ntlmssp)) = 0.0.0.20200615164410.66371956d46c", "bundled(golang(gopkg.in/square/go.jose.v2)) = 2.5.1", "bundled(golang(github.com/PuerkitoBio/purell)) = 1.1.1", "bundled(golang(github.com/cloudflare/cfssl)) = 0.0.0.20190510060611.9c027c93ba9e", "bundled(golang(github.com/PuerkitoBio/urlesc)) = 0.0.0.20170810143723.de5bf2ad4578", "bundled(golang(github.com/containerd/continuity)) = 0.0.0.20201208142359.180525291bb7", "bundled(golang(github.com/Microsoft/go.winio)) = 0.4.16", "bundled(golang(github.com/inconshreveable/mousetrap)) = 1.0.0", "bundled(golang(github.com/docker/go.connections)) = 0.4.0", "bundled(golang(github.com/prometheus/procfs)) = 0.2.0", "bundled(golang(github.com/json.iterator/go)) = 1.1.10", "bundled(golang(github.com/FZambia/sentinel)) = 1.1.0", "bundled(golang(sigs.k8s.io/kustomize/api)) = 0.8.5", "bundled(golang(github.com/prometheus/client_model)) = 0.2.0", "bundled(golang(github.com/go.openapi/strfmt)) = 0.19.5", "bundled(golang(gopkg.in/gorethink/gorethink.v3)) = 3.0.5", "bundled(golang(github.com/fatih/color)) = 1.7.0", "bundled(golang(github.com/golang.jwt/jwt/v4)) = 4.1.0", "bundled(golang(google.golang.org/api)) = 0.0.0.20160322025152.9bf6e6e569ff", "bundled(golang(github.com/ghodss/yaml)) = 1.0.0", "bundled(golang(github.com/gogo/protobuf)) = 1.3.2", "bundled(golang(github.com/gorilla/handlers)) = 1.4.2", "bundled(golang(github.com/Azure/go.autorest/autorest/adal)) = 0.9.5", "bundled(golang(golang.org/x/sys)) = 0.0.0.20210910150752.751e447fb3d0", "bundled(golang(gopkg.in/yaml.v3)) = 3.0.0.20200615113413.eeeca48fe776", "bundled(golang(github.com/Azure/go.autorest/autorest/date)) = 0.3.0", "bundled(golang(github.com/spf13/afero)) = 1.2.2", "bundled(golang(github.com/prometheus/client_golang)) = 1.7.1", "bundled(golang(github.com/cyphar/filepath.securejoin)) = 0.2.2", "bundled(golang(github.com/asaskevich/govalidator)) = 0.0.0.20210307081110.f21760c49a8d", "bundled(golang(github.com/fsnotify/fsnotify)) = 1.4.9", "bundled(golang(github.com/go.openapi/spec)) = 0.19.8", "bundled(golang(github.com/gorilla/mux)) = 1.8.0", "bundled(golang(go.uber.org/ratelimit)) = 0.2.0", "bundled(golang(google.golang.org/cloud)) = 0.0.0.20151119220103.975617b05ea8", "bundled(golang(github.com/liggitt/tabwriter)) = 0.0.0.20181228230101.89fcab3d43de", "bundled(golang(go.mongodb.org/mongo.driver)) = 1.5.1", "bundled(golang(golang.org/x/crypto)) = 0.0.0.20210220033148.5ea612d1eb83", "bundled(golang(github.com/go.openapi/loads)) = 0.19.5", "bundled(golang(gopkg.in/fatih/pool.v2)) = 2.0.0", "bundled(golang(github.com/Azure/go.autorest/logger)) = 0.2.0", "bundled(golang(github.com/containerd/containerd)) = 1.4.11", "bundled(golang(github.com/go.errors/errors)) = 1.0.1", "bundled(golang(gopkg.in/dancannon/gorethink.v3)) = 3.0.5", "bundled(golang(github.com/gocraft/work)) = 0.5.1", "bundled(golang(github.com/davecgh/go.spew)) = 1.1.1", "bundled(golang(github.com/spf13/jwalterweatherman)) = 1.0.0", "bundled(golang(gopkg.in/yaml.v2)) = 2.4.0", "bundled(golang(github.com/hashicorp/hcl)) = 1.0.0", "bundled(golang(github.com/docker/go)) = 0.0.0.20160303222718.d30aec9fd63c", "bundled(golang(github.com/mitchellh/reflectwalk)) = 1.0.1", "bundled(golang(google.golang.org/appengine)) = 1.6.5", "bundled(golang(github.com/docker/libtrust)) = 0.0.0.20160708172513.aabc10ec26b7", "bundled(golang(github.com/Azure/azure.sdk.for.go)) = 37.2.0+incompatible", "bundled(golang(github.com/go.openapi/jsonpointer)) = 0.19.3", "bundled(golang(github.com/spf13/pflag)) = 1.0.5", "bundled(golang(go.opentelemetry.io/otel/exporters/otlp/otlptrace)) = 1.0.0", "bundled(golang(github.com/deislabs/oras)) = 0.11.1", "bundled(golang(github.com/miekg/pkcs11)) = 0.0.0.20170220202408.7283ca79f35e", "bundled(golang(go.opentelemetry.io/proto/otlp)) = 0.9.0", "bundled(golang(k8s.io/apiextensions.apiserver)) = 0.21.0", "bundled(golang(github.com/opencontainers/runc)) = 1.0.0.rc95", "bundled(golang(github.com/Knetic/govaluate)) = 3.0.1.0.20171022003610.9aa49832a739+incompatible", "bundled(golang(github.com/docker/docker)) = 17.12.0.ce.rc1.0.20200618181300.9dc6525e6118+incompatible", "bundled(golang(github.com/felixge/httpsnoop)) = 1.0.2", "bundled(golang(github.com/bugsnag/bugsnag.go)) = 1.5.2", "bundled(golang(go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp)) = 1.0.0", "bundled(golang(github.com/go.logr/logr)) = 0.4.0", "bundled(golang(github.com/pelletier/go.toml)) = 1.7.0", "bundled(golang(github.com/beego/i18n)) = 0.0.0.20140604031826.e87155e8f0c0", "bundled(golang(github.com/agl/ed25519)) = 0.0.0.20170116200512.5312a6153412", "bundled(golang(github.com/Unknwon/goconfig)) = 0.0.0.20160216183935.5f601ca6ef4d", "bundled(golang(github.com/magiconair/properties)) = 1.8.1", "bundled(golang(sigs.k8s.io/kustomize/kyaml)) = 0.10.15", "bundled(golang(github.com/form3tech.oss/jwt.go)) = 3.2.2+incompatible", "bundled(golang(sigs.k8s.io/structured.merge.diff/v4)) = 4.1.0", "bundled(golang(github.com/go.stack/stack)) = 1.8.0", "bundled(golang(github.com/jpillora/backoff)) = 1.0.0", "bundled(golang(github.com/xeipuuv/gojsonpointer)) = 0.0.0.20180127040702.4e3ac2762d5f", "bundled(golang(github.com/go.sql.driver/mysql)) = 1.5.0", "bundled(golang(github.com/andres.erbsen/clock)) = 0.0.0.20160526145045.9e14626cd129", "bundled(golang(go.opentelemetry.io/otel/trace)) = 1.0.0", "bundled(golang(gopkg.in/ini.v1)) = 1.51.0", "bundled(golang(github.com/go.redis/redis)) = 6.14.2+incompatible", "bundled(golang(github.com/go.asn1.ber/asn1.ber)) = 1.5.1", "bundled(golang(github.com/sirupsen/logrus)) = 1.8.1", "bundled(golang(go.starlark.net)) = 0.0.0.20200306205701.8dd3e2ee1dd5", "bundled(golang(github.com/coreos/go.oidc/v3)) = 3.0.0", "bundled(golang(github.com/opencontainers/image.spec)) = 1.0.1", "bundled(golang(github.com/docker/docker.credential.helpers)) = 0.6.3", "bundled(golang(github.com/grpc.ecosystem/grpc.gateway)) = 1.16.0", "bundled(golang(github.com/satori/go.uuid)) = 1.2.0", "bundled(golang(cloud.google.com/go)) = 0.54.0", "bundled(golang(github.com/google/certificate.transparency.go)) = 1.0.21", "bundled(golang(go.opencensus.io)) = 0.22.3", "bundled(golang(go.opentelemetry.io/otel/internal/metric)) = 0.22.0", "bundled(golang(github.com/pkg/errors)) = 0.9.1", "bundled(golang(golang.org/x/time)) = 0.0.0.20210220033141.f8bda1e9f3ba", "bundled(golang(github.com/robfig/cron)) = 1.0.0", "bundled(golang(go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp)) = 0.22.0", "bundled(golang(github.com/docker/go.units)) = 0.4.0", "bundled(golang(github.com/Masterminds/semver)) = 1.4.2", "bundled(golang(github.com/Azure/go.autorest/autorest)) = 0.11.12", "bundled(golang(github.com/aliyun/alibaba.cloud.sdk.go)) = 0.0.0.20190726115642.cd293c93fd97", "bundled(golang(go.opentelemetry.io/contrib)) = 0.22.0", "bundled(golang(github.com/denverdino/aliyungo)) = 0.0.0.20191227032621.df38c6fa730c", "bundled(golang(github.com/spf13/viper)) = 1.7.1", "bundled(golang(github.com/gregjones/httpcache)) = 0.0.0.20180305231024.9cad4c3443a7", "bundled(golang(gopkg.in/h2non/gock.v1)) = 1.0.16", "bundled(golang(k8s.io/utils)) = 0.0.0.20201110183641.67b214c5f920", "bundled(golang(golang.org/x/sync)) = 0.0.0.20210220032951.036812b2e83c", "bundled(golang(github.com/vmihailenco/tagparser)) = 0.1.2", "bundled(golang(github.com/Azure/go.autorest)) = 14.2.0+incompatible", "bundled(golang(go.opentelemetry.io/otel)) = 1.0.0", "bundled(golang(github.com/casbin/casbin)) = 1.7.0", "bundled(golang(github.com/go.openapi/jsonreference)) = 0.19.3", "bundled(golang(github.com/go.openapi/runtime)) = 0.19.20", "bundled(golang(github.com/hashicorp/errwrap)) = 1.0.0", "bundled(golang(github.com/Azure/go.autorest/tracing)) = 0.6.0", "bundled(golang(k8s.io/client.go)) = 0.21.0", "bundled(golang(github.com/prometheus/common)) = 0.10.0", "bundled(golang(github.com/gorilla/securecookie)) = 1.1.1", "bundled(golang(github.com/ncw/swift)) = 1.0.49", "bundled(golang(github.com/opentracing/opentracing.go)) = 1.2.0", "bundled(golang(github.com/olekukonko/tablewriter)) = 0.0.4", "bundled(golang(github.com/google/gofuzz)) = 1.1.0", "bundled(golang(github.com/xeipuuv/gojsonschema)) = 1.2.0", "bundled(golang(golang.org/x/oauth2)) = 0.0.0.20200107190931.bf48bf16ab8d", "bundled(golang(go.opentelemetry.io/otel/exporters/jaeger)) = 1.0.0", "bundled(golang(github.com/golang.migrate/migrate/v4)) = 4.11.0", "bundled(golang(github.com/golang/protobuf)) = 1.5.2", "bundled(golang(github.com/google/go.querystring)) = 1.0.0", "bundled(golang(k8s.io/api)) = 0.21.0", "bundled(golang(github.com/stretchr/testify)) = 1.7.0", "bundled(golang(google.golang.org/genproto)) = 0.0.0.20210831024726.fe130286e0e2", "bundled(golang(github.com/theupdateframework/notary)) = 0.6.1", "bundled(golang(github.com/opencontainers/go.digest)) = 1.0.0", "bundled(golang(github.com/nfnt/resize)) = 0.0.0.20180221191011.83c6a9932646", "bundled(golang(go.opentelemetry.io/otel/sdk)) = 1.0.0", "bundled(golang(github.com/Azure/go.autorest/autorest/to)) = 0.3.0", "bundled(golang(github.com/gofrs/uuid)) = 3.2.0+incompatible", "bundled(golang(github.com/gorilla/csrf)) = 1.6.2", "bundled(golang(github.com/dghubble/sling)) = 1.1.0", "bundled(golang(github.com/mitchellh/copystructure)) = 1.1.1", "bundled(golang(github.com/xlab/treeprint)) = 0.0.0.20181112141820.a009c3971eca", "bundled(golang(k8s.io/apimachinery)) = 0.21.0", "bundled(golang(github.com/tencentcloud/tencentcloud.sdk.go)) = 1.0.62", "bundled(golang(github.com/go.openapi/validate)) = 0.19.10", "bundled(golang(github.com/bmatcuk/doublestar)) = 1.1.1", "bundled(golang(github.com/Masterminds/semver/v3)) = 3.1.1", "bundled(golang(google.golang.org/protobuf)) = 1.27.1", "bundled(golang(github.com/astaxie/beego)) = 1.12.1", "bundled(golang(github.com/cenkalti/backoff/v4)) = 4.1.1", "bundled(golang(github.com/mattn/go.runewidth)) = 0.0.7", "bundled(golang(github.com/Azure/go.ansiterm)) = 0.0.0.20170929234023.d6e3b3328b78", "bundled(golang(github.com/monochromegane/go.gitignore)) = 0.0.0.20200626010858.205db1a8cc00", "bundled(golang(github.com/matttproud/golang_protobuf_extensions)) = 1.0.2.0.20181231171920.c182affec369", "bundled(golang(github.com/spf13/cobra)) = 1.1.3", "bundled(golang(github.com/mattn/go.isatty)) = 0.0.7", "bundled(golang(github.com/mitchellh/mapstructure)) = 1.3.2", "bundled(golang(github.com/morikuni/aec)) = 1.0.0", "bundled(golang(helm.sh/helm/v3)) = 3.6.1", "bundled(golang(github.com/graph.gophers/dataloader)) = 5.0.0+incompatible", "bundled(golang(rsc.io/letsencrypt)) = 0.0.3", "bundled(golang(github.com/jmespath/go.jmespath)) = 0.4.0", "bundled(golang(github.com/evanphx/json.patch)) = 4.9.0+incompatible", "bundled(golang(github.com/bugsnag/panicwrap)) = 1.2.0", "bundled(golang(go.opentelemetry.io/otel/metric)) = 0.22.0", "bundled(golang(github.com/xeipuuv/gojsonreference)) = 0.0.0.20180127040603.bd5ef7bd5415", "bundled(golang(github.com/google/btree)) = 1.0.0", "bundled(golang(golang.org/x/net)) = 0.0.0.20210902165921.8d991716f632", "bundled(golang(github.com/golang/groupcache)) = 0.0.0.20200121045136.8c9f03a8e57e", "bundled(golang(github.com/mattn/go.colorable)) = 0.1.1", "bundled(golang(github.com/spf13/cast)) = 1.3.1", "bundled(golang(github.com/google/go.cmp)) = 0.5.6", "bundled(golang(github.com/containerd/cgroups)) = 0.0.0.20200531161412.0dbf7f05ba59", "bundled(golang(github.com/mailru/easyjson)) = 0.7.1", "bundled(golang(github.com/go.ldap/ldap/v3)) = 3.2.4", "bundled(golang(github.com/docker/distribution)) = 2.7.1+incompatible", "bundled(golang(github.com/go.openapi/analysis)) = 0.19.10", "bundled(golang(github.com/aws/aws.sdk.go)) = 1.34.28", "bundled(golang(github.com/docker/cli)) = 20.10.5+incompatible", "bundled(golang(github.com/googleapis/gnostic)) = 0.4.1", "bundled(golang(github.com/subosito/gotenv)) = 1.2.0", "bundled(golang(github.com/modern.go/concurrent)) = 0.0.0.20180306012644.bacd9c7ef1dd", "bundled(golang(sigs.k8s.io/yaml)) = 1.2.0", "bundled(golang(github.com/imdario/mergo)) = 0.3.11", "bundled(golang(k8s.io/cli.runtime)) = 0.21.0", "bundled(golang(github.com/modern.go/reflect2)) = 1.0.1", "bundled(golang(golang.org/x/term)) = 0.0.0.20210220032956.6a3ed077a48d", "bundled(golang(golang.org/x/text)) = 0.3.7", "bundled(golang(github.com/google/shlex)) = 0.0.0.20191202100458.e7afc7fbc510", "bundled(golang(github.com/go.openapi/errors)) = 0.19.6", "bundled(golang(go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux)) = 0.22.0", "bundled(golang(github.com/gomodule/redigo)) = 2.0.0+incompatible", "bundled(golang(github.com/go.openapi/swag)) = 0.19.9", "bundled(golang(gopkg.in/inf.v0)) = 0.9.1", "bundled(golang(k8s.io/klog/v2)) = 2.8.0", "bundled(golang(github.com/vmihailenco/msgpack/v5)) = 5.0.0.rc.2", "bundled(golang(github.com/pmezard/go.difflib)) = 1.0.0", "bundled(golang(github.com/shiena/ansicolor)) = 0.0.0.20151119151921.a422bbe96644", "bundled(golang(github.com/h2non/parth)) = 0.0.0.20190131123155.b4df798d6542", "bundled(golang(github.com/peterbourgon/diskv)) = 2.0.1+incompatible", "bundled(golang(github.com/lib/pq)) = 1.10.0", "bundled(golang(github.com/docker/go.metrics)) = 0.0.0.20181218153428.b84716841b82", "bundled(golang(github.com/hashicorp/go.multierror)) = 1.1.0"]}, "rpm files": {"less": ["/usr/share/harbor/html/main-es5.49256ff7ffdc4a6a46f4.js", "/usr/share/harbor/html/main-es2015.49256ff7ffdc4a6a46f4.js"], "more": ["/usr/share/harbor/html/main-es2015.9e67cdfb1a17134dc1b8.js", "/usr/share/harbor/html/main-es5.9e67cdfb1a17134dc1b8.js"]}, "rpm cmd": {}}}, "diff_num": 1}, "less": {"less_details": {}, "less_num": 0}, "more": {"more_details": {}, "more_num": 0}}, "pr_link": "https://gitcode.com/src-openeuler/harbor/pull/4", "pr_changelog": "* Tue Sep 22 2026 infra_team <zhaiwenjie1@huawei.com> - 2.4.1-2\n- fix CVE-2026-92770: prevent scanner access credential disclosure via query parameter\n- add filter:\"false\" tag to scanner AccessCredential and fix orm Filterable()\n- build portal with NODE_OPTIONS=--openssl-legacy-provider for nodejs 24 (OpenSSL 3 drops MD4)\n"}