Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.23 for openSUSE:Factory checked in at 2025-01-25 19:09:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.23 (Old) and /work/SRC/openSUSE:Factory/.go1.23.new.2316 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.23" Sat Jan 25 19:09:43 2025 rev:8 rq:1240020 version:1.23.5 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.23/go1.23.changes 2024-12-11 21:04:10.532569582 +0100 +++ /work/SRC/openSUSE:Factory/.go1.23.new.2316/go1.23.changes 2025-01-25 19:09:47.878060705 +0100 @@ -1,0 +2,16 @@ +Thu Jan 16 20:07:56 UTC 2025 - Jeff Kowalczyk <[email protected]> + +- go1.23.5 (released 2025-01-16) includes security fixes to the + crypto/x509 and net/http packages, as well as bug fixes to the + compiler, the runtime, and the net package. + Refs boo#1229122 go1.23 release tracking + CVE-2024-45341 CVE-2024-45336 + * go#71208 go#71156 boo#1236045 security: fix CVE-2024-45341 crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints + * go#71211 go#70530 boo#1236046 security: fix CVE-2024-45336 net/http: sensitive headers incorrectly sent after cross-domain redirect + * go#69988 runtime: severe performance drop for cgo calls in go1.22.5 + * go#70517 cmd/compile/internal/importer: flip enable alias to true + * go#70789 os: io.Copy(net.Conn, os.Stdin) on MacOS terminate immediately without waiting for input + * go#71104 crypto/tls: TestVerifyConnection/TLSv12 failures + * go#71147 internal/trace: TestTraceCPUProfile/Stress failures + +------------------------------------------------------------------- Old: ---- go1.23.4.src.tar.gz New: ---- go1.23.5.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.23.spec ++++++ --- /var/tmp/diff_new_pack.E9vjDN/_old 2025-01-25 19:09:48.538087701 +0100 +++ /var/tmp/diff_new_pack.E9vjDN/_new 2025-01-25 19:09:48.542087864 +0100 @@ -1,7 +1,7 @@ # # spec file for package go1.23 # -# Copyright (c) 2024 SUSE LLC +# Copyright (c) 2025 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -122,7 +122,7 @@ %endif Name: go1.23 -Version: 1.23.4 +Version: 1.23.5 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.23.4.src.tar.gz -> go1.23.5.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.23/go1.23.4.src.tar.gz /work/SRC/openSUSE:Factory/.go1.23.new.2316/go1.23.5.src.tar.gz differ: char 110, line 1
