Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.22 for openSUSE:Factory checked in at 2024-07-04 16:22:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.22 (Old) and /work/SRC/openSUSE:Factory/.go1.22.new.2080 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "go1.22" Thu Jul 4 16:22:49 2024 rev:11 rq:1184954 version:1.22.5 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.22/go1.22.changes 2024-06-05 17:43:15.871994095 +0200 +++ /work/SRC/openSUSE:Factory/.go1.22.new.2080/go1.22.changes 2024-07-04 16:24:04.117251044 +0200 @@ -1,0 +2,23 @@ +Tue Jul 2 18:51:45 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com> + +- go1.22.5 (released 2024-07-02) includes security fixes to the + net/http package, as well as bug fixes to the compiler, cgo, the + go command, the linker, the runtime, and the crypto/tls, + go/types, net, net/http, and os/exec packages. + Refs boo#1218424 go1.22 release tracking + CVE-2024-24791 + * go#68200 go#67555 boo#1227314 security: fix CVE CVE-2024-24791 net/http: expect: 100-continue handling is broken in various ways + * go#65983 cmd/compile: hash of unhashable type + * go#65994 crypto/tls: segfault when calling tlsrsakex.IncNonDefault() + * go#66598 os/exec: calling Cmd.Start after setting Cmd.Path manually to absolute path without ".exe" no longer implicitly adds ".exe" in Go 1.22 + * go#67298 runtime: "fatal: morestack on g0" on amd64 after upgrade to Go 1.21, stale bounds + * go#67715 cmd/cgo/internal/swig,cmd/go,x/build: swig cgo tests incompatible with C++ toolchain on builders + * go#67798 cmd/compile: internal compiler error: unexpected type: <nil> (<nil>) in for-range + * go#67820 cmd/compile: package-level variable initialization with constant dependencies doesn't match order specified in Go spec + * go#67850 go/internal/gccgoimporter: go building failing with gcc 14.1.0 + * go#67934 net: go DNS resolver fails to connect to local DNS server + * go#67945 cmd/link: using -fuzz with test that links with cgo on darwin causes linker failure + * go#68052 cmd/go: go list -u -m all fails loading module retractions: module requires go >= 1.N+1 (running go 1.N) + * go#68122 cmd/link: runtime.mach_vm_region_trampoline: unsupported dynamic relocation for symbol libc_mach_task_self_ (type=29 (R_GOTPCREL) stype=46 (SDYNIMPORT)) + +------------------------------------------------------------------- Old: ---- go1.22.4.src.tar.gz New: ---- go1.22.5.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.22.spec ++++++ --- /var/tmp/diff_new_pack.6digMM/_old 2024-07-04 16:24:04.877278800 +0200 +++ /var/tmp/diff_new_pack.6digMM/_new 2024-07-04 16:24:04.881278946 +0200 @@ -122,7 +122,7 @@ %endif Name: go1.22 -Version: 1.22.4 +Version: 1.22.5 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.22.4.src.tar.gz -> go1.22.5.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.22/go1.22.4.src.tar.gz /work/SRC/openSUSE:Factory/.go1.22.new.2080/go1.22.5.src.tar.gz differ: char 13, line 1