Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package go1.24 for openSUSE:Factory checked 
in at 2026-02-10 21:11:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/go1.24 (Old)
 and      /work/SRC/openSUSE:Factory/.go1.24.new.1670 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "go1.24"

Tue Feb 10 21:11:53 2026 rev:20 rq:1332055 version:1.24.13

Changes:
--------
--- /work/SRC/openSUSE:Factory/go1.24/go1.24.changes    2026-01-18 
22:18:54.535719254 +0100
+++ /work/SRC/openSUSE:Factory/.go1.24.new.1670/go1.24.changes  2026-02-10 
21:11:59.402475655 +0100
@@ -1,0 +2,14 @@
+Wed Feb  4 15:46:48 UTC 2026 - Jeff Kowalczyk <[email protected]>
+
+- go1.24.13 (released 2026-02-04) includes security fixes to the go
+  command and the crypto/tls package, as well as bug fixes to the
+  crypto/x509 package.
+  Refs boo#1236217 go1.24 release tracking
+  CVE-2025-61732 CVE-2025-68121 CVE-2025-68119
+  * go#77128 go#76697 boo#1257692 security: fix CVE-2025-61732 cmd/go: 
potential code smuggling using doc comments
+  * go#77355 go#77217 boo#1256818 crypto/tls:  CVE-2025-68121 revert 
Config.Clone change and apply lightweight chain validation
+  * go#77103 go#77099 boo#1256820 security: fix CVE-2025-68119 cmd/go: 
unexpected code execution when invoking toolchain
+  * go#77322 crypto/x509: single-label excluded DNS name constraints 
incorrectly match all wildcard SANs
+  * go#77424 crypto/tls: CL 737700 broke session resumption on macOS
+
+-------------------------------------------------------------------

Old:
----
  go1.24.12.src.tar.gz

New:
----
  go1.24.13.src.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ go1.24.spec ++++++
--- /var/tmp/diff_new_pack.2M6lAc/_old  2026-02-10 21:12:00.118505658 +0100
+++ /var/tmp/diff_new_pack.2M6lAc/_new  2026-02-10 21:12:00.118505658 +0100
@@ -107,7 +107,7 @@
 %endif
 
 Name:           go1.24
-Version:        1.24.12
+Version:        1.24.13
 Release:        0
 Summary:        A compiled, garbage-collected, concurrent programming language
 License:        BSD-3-Clause

++++++ go1.24.12.src.tar.gz -> go1.24.13.src.tar.gz ++++++
/work/SRC/openSUSE:Factory/go1.24/go1.24.12.src.tar.gz 
/work/SRC/openSUSE:Factory/.go1.24.new.1670/go1.24.13.src.tar.gz differ: char 
110, line 1

Reply via email to