Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.22 for openSUSE:Factory checked in at 2024-06-05 17:42:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.22 (Old) and /work/SRC/openSUSE:Factory/.go1.22.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "go1.22" Wed Jun 5 17:42:32 2024 rev:10 rq:1178641 version:1.22.4 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.22/go1.22.changes 2024-05-08 11:42:32.282909494 +0200 +++ /work/SRC/openSUSE:Factory/.go1.22.new.24587/go1.22.changes 2024-06-05 17:43:15.871994095 +0200 @@ -1,0 +2,23 @@ +Tue Jun 4 18:08:59 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com> + +- go1.22.4 (released 2024-06-04) includes security fixes to the + archive/zip and net/netip packages, as well as bug fixes to the + compiler, the go command, the linker, the runtime, and the os + package. + Refs boo#1218424 go1.22 release tracking + CVE-2024-24789 CVE-2024-24790 + * go#67554 go#66869 boo#1225973 security: fix CVE-2024-24789 archive/zip: EOCDR comment length handling is inconsistent with other ZIP implementations + * go#67682 go#67680 boo#1225974 security: fix CVE-2024-24790 net/netip: unexpected behavior from Is methods for IPv4-mapped IPv6 addresses + * go#67188 runtime/metrics: /memory/classes/heap/unused:bytes spikes + * go#67212 cmd/compile: SIGBUS unaligned access on mips64 via qemu-mips64 + * go#67236 cmd/go: mod tidy reports toolchain not available with 'go 1.21' + * go#67258 runtime: unexpected fault address 0 + * go#67311 cmd/go: TestScript/gotoolchain_issue66175 fails on tip locally + * go#67314 cmd/go,cmd/link: TestScript/build_issue48319 and TestScript/build_plugin_reproducible failing on LUCI gotip-darwin-amd64-longtest builder due to non-reproducible LC_UUID + * go#67352 crypto/x509: TestPlatformVerifier failures on Windows due to broken connections + * go#67460 cmd/compile: internal compiler error: panic with range over integer value + * go#67527 cmd/link: panic: machorelocsect: size mismatch + * go#67650 runtime: SIGSEGV after performing clone(CLONE_PARENT) via C constructor prior to runtime start + * go#67696 os: RemoveAll susceptible to symlink race + +------------------------------------------------------------------- Old: ---- go1.22.3.src.tar.gz New: ---- go1.22.4.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.22.spec ++++++ --- /var/tmp/diff_new_pack.b8w15q/_old 2024-06-05 17:43:16.652022501 +0200 +++ /var/tmp/diff_new_pack.b8w15q/_new 2024-06-05 17:43:16.656022647 +0200 @@ -122,7 +122,7 @@ %endif Name: go1.22 -Version: 1.22.3 +Version: 1.22.4 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.22.3.src.tar.gz -> go1.22.4.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.22/go1.22.3.src.tar.gz /work/SRC/openSUSE:Factory/.go1.22.new.24587/go1.22.4.src.tar.gz differ: char 111, line 2