Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.23 for openSUSE:Factory checked in at 2025-07-09 17:26:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.23 (Old) and /work/SRC/openSUSE:Factory/.go1.23.new.7373 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.23" Wed Jul 9 17:26:26 2025 rev:14 rq:1291361 version:1.23.11 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.23/go1.23.changes 2025-06-10 08:58:51.315457266 +0200 +++ /work/SRC/openSUSE:Factory/.go1.23.new.7373/go1.23.changes 2025-07-09 17:26:52.847734129 +0200 @@ -1,0 +2,15 @@ +Tue Jul 8 17:00:23 UTC 2025 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.23.11 (released 2025-07-08) includes security fixes to the go + command, as well as bug fixes to the compiler, the linker, and + the runtime. + Refs boo#1229122 go1.23 release tracking + CVE-2025-4674 + * go#74382 go#74380 boo#1246118 security: fix CVE-2025-4674 cmd/go: disable support for multiple vcs in one module + * go#73907 runtime: bad frame pointer during panic during duffcopy + * go#74289 runtime: heap mspan limit is set too late, causing data race between span allocation and conservative scanning + * go#74293 internal/trace: stress tests triggering suspected deadlock in tracer + * go#74362 runtime/pprof: crash "cannot read stack of running goroutine" in goroutine profile + * go#74402 cmd/link: duplicated definition of symbol github.com/ebitengine/purego.syscall15XABI0 when running with ASAN + +------------------------------------------------------------------- Old: ---- go1.23.10.src.tar.gz New: ---- go1.23.11.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.23.spec ++++++ --- /var/tmp/diff_new_pack.VZeki1/_old 2025-07-09 17:26:53.511761759 +0200 +++ /var/tmp/diff_new_pack.VZeki1/_new 2025-07-09 17:26:53.515761926 +0200 @@ -122,7 +122,7 @@ %endif Name: go1.23 -Version: 1.23.10 +Version: 1.23.11 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.23.10.src.tar.gz -> go1.23.11.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.23/go1.23.10.src.tar.gz /work/SRC/openSUSE:Factory/.go1.23.new.7373/go1.23.11.src.tar.gz differ: char 17, line 1