Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.22 for openSUSE:Factory checked in at 2025-01-25 19:09:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.22 (Old) and /work/SRC/openSUSE:Factory/.go1.22.new.2316 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.22" Sat Jan 25 19:09:42 2025 rev:18 rq:1240019 version:1.22.11 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.22/go1.22.changes 2024-12-11 21:04:53.534364199 +0100 +++ /work/SRC/openSUSE:Factory/.go1.22.new.2316/go1.22.changes 2025-01-25 19:09:45.693971374 +0100 @@ -1,0 +2,13 @@ +Thu Jan 16 20:07:58 UTC 2025 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.22.11 (released 2025-01-16) includes security fixes to the + crypto/x509 and net/http packages, as well as bug fixes to the + runtime. + Refs boo#1218424 go1.22 release tracking + CVE-2024-45341 CVE-2024-45336 + * go#71207 go#71156 boo#1236045 security: fix CVE-2024-45341 crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints + * go#71210 go#70530 boo#1236046 security: fix CVE-2024-45336 net/http: sensitive headers incorrectly sent after cross-domain redirect + * go#71103 crypto/tls: TestVerifyConnection/TLSv12 failures + * go#71146 internal/trace: TestTraceCPUProfile/Stress failures + +------------------------------------------------------------------- Old: ---- go1.22.10.src.tar.gz New: ---- go1.22.11.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.22.spec ++++++ --- /var/tmp/diff_new_pack.r1DXc2/_old 2025-01-25 19:09:46.410000659 +0100 +++ /var/tmp/diff_new_pack.r1DXc2/_new 2025-01-25 19:09:46.410000659 +0100 @@ -1,7 +1,7 @@ # # spec file for package go1.22 # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -122,7 +122,7 @@ %endif Name: go1.22 -Version: 1.22.10 +Version: 1.22.11 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.22.10.src.tar.gz -> go1.22.11.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.22/go1.22.10.src.tar.gz /work/SRC/openSUSE:Factory/.go1.22.new.2316/go1.22.11.src.tar.gz differ: char 110, line 2
