{"old": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/t-digest/old_rpms/", "new": "/home/jenkins/agent/workspace/multiarch/src-openeuler/aarch64/t-digest/new_rpms/", "compare_result": "not pass", "compare_details": {"same": {"same_details": {"old": [], "new": []}, "same_num": 0}, "diff": {"diff_details": {"t-digest": {"name": {"old": "t-digest-3.2-1.oe1.noarch.rpm", "new": "t-digest-3.2-2.oe1.noarch.rpm"}, "RPM Level": "level4", "rpm requires": {"less": ["rpmlib(PayloadIsXz) <= 5.2", "java-headless >= 1:1.8"], "more": ["rpmlib(PayloadIsZstd) <= 5.4.18"]}, "rpm provides": {}, "rpm files": {}, "rpm jabi": {}, "rpm lib": {}}}, "diff_num": 1}, "less": {"less_details": {}, "less_num": 0}, "more": {"more_details": {}, "more_num": 0}}, "pr_link": "https://gitcode.com/src-openeuler/t-digest/pull/3", "pr_changelog": "* Mon Sep 21 2026 infra_team <zhaiwenjie1@huawei.com> - 3.2-2\n- fix CVE: CVE-2026-87962\n- validate length fields read by MergingDigest.fromBytes so hostile serialized\n  data can no longer trigger ArrayIndexOutOfBoundsException,\n  NegativeArraySizeException or huge allocations (denial of service)\n"}