Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.15 for openSUSE:Factory checked in at 2021-03-15 10:53:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.15 (Old) and /work/SRC/openSUSE:Factory/.go1.15.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.15" Mon Mar 15 10:53:57 2021 rev:10 rq:878438 version:1.15.10 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.15/go1.15.changes 2021-02-11 12:48:12.173560116 +0100 +++ /work/SRC/openSUSE:Factory/.go1.15.new.2401/go1.15.changes 2021-03-15 10:54:00.465135563 +0100 @@ -1,0 +2,25 @@ +Fri Mar 12 01:27:53 UTC 2021 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.15.10 (released 2021-03-11) includes fixes to the compiler, + the go command, and the net/http, os, syscall, and time packages. + Refs boo#1175132 go1.15 release tracking + * go#44792 cmd/go: mod tidy should ignore missing standard library packages + * go#44658 runtime: marked free object in span + * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone + * go#44592 syscall & x/sys/windows: buffer overflow in GetQueuedCompletionStatus + * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens + * go#44273 os: copy_file_range system call fails on some file systems + * go#42935 net/http: Transport race condition by Content-Length == 0 response + * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm + +------------------------------------------------------------------- +Wed Mar 10 17:33:27 UTC 2021 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.15.9 (released 2021-03-10) includes security fixes to the + encoding/xml package. + CVE-2021-27918 + Refs boo#1175132 go1.15 release tracking + * boo#1183333 CVE-2021-27918 + * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader` + +------------------------------------------------------------------- Old: ---- go1.15.8.src.tar.gz New: ---- go1.15.10.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.15.spec ++++++ --- /var/tmp/diff_new_pack.V8trmg/_old 2021-03-15 10:54:01.113136557 +0100 +++ /var/tmp/diff_new_pack.V8trmg/_new 2021-03-15 10:54:01.121136570 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.15 -Version: 1.15.8 +Version: 1.15.10 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.15.8.src.tar.gz -> go1.15.10.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.15/go1.15.8.src.tar.gz /work/SRC/openSUSE:Factory/.go1.15.new.2401/go1.15.10.src.tar.gz differ: char 143, line 1
