Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.21 for openSUSE:Factory checked in at 2024-06-06 12:30:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.21 (Old) and /work/SRC/openSUSE:Factory/.go1.21.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "go1.21" Thu Jun 6 12:30:25 2024 rev:17 rq:1178640 version:1.21.11 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.21/go1.21.changes 2024-05-09 12:07:44.345582258 +0200 +++ /work/SRC/openSUSE:Factory/.go1.21.new.24587/go1.21.changes 2024-06-06 12:30:32.039911149 +0200 @@ -1,0 +2,18 @@ +Tue Jun 4 18:11:01 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com> + +- go1.21.11 (released 2024-06-04) includes security fixes to the + archive/zip and net/netip packages, as well as bug fixes to the + compiler, the go command, the runtime, and the os package. + Refs boo#1212475 go1.21 release tracking + CVE-2024-24789 CVE-2024-24790 + * go#67553 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations + * go#67681 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses + * go#64586 cmd/go: spurious "v1.x.y is not a tag" error when a tag's commit was previously download without the tag + * go#67164 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64 + * go#67187 runtime/metrics: /memory/classes/heap/unused:bytes spikes + * go#67235 cmd/go: mod tidy reports toolchain not available with 'go 1.21' + * go#67310 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally + * go#67351 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections + * go#67695 os: RemoveAll susceptible to symlink race + +------------------------------------------------------------------- Old: ---- go1.21.10.src.tar.gz New: ---- go1.21.11.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.21.spec ++++++ --- /var/tmp/diff_new_pack.b2fnSU/_old 2024-06-06 12:30:33.771974408 +0200 +++ /var/tmp/diff_new_pack.b2fnSU/_new 2024-06-06 12:30:33.775974554 +0200 @@ -126,7 +126,7 @@ %endif Name: go1.21 -Version: 1.21.10 +Version: 1.21.11 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.21.10.src.tar.gz -> go1.21.11.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.21/go1.21.10.src.tar.gz /work/SRC/openSUSE:Factory/.go1.21.new.24587/go1.21.11.src.tar.gz differ: char 110, line 2