Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.25 for openSUSE:Factory checked in at 2026-06-05 14:56:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.25 (Old) and /work/SRC/openSUSE:Factory/.go1.25.new.2375 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.25" Fri Jun 5 14:56:53 2026 rev:18 rq:1357052 version:1.25.11 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.25/go1.25.changes 2026-05-08 16:47:12.897774548 +0200 +++ /work/SRC/openSUSE:Factory/.go1.25.new.2375/go1.25.changes 2026-06-05 14:56:58.568058256 +0200 @@ -1,0 +2,14 @@ +Tue Jun 2 18:57:25 UTC 2026 - Jeff Kowalczyk <[email protected]> + +- go1.25.11 (released 2026-06-02) includes security fixes to the + crypto/x509, mime, and net/textproto packages, as well as bug + fixes to the compiler and the runtime. + Refs boo#1244485 go1.25 release tracking + CVE-2026-42504 CVE-2026-42507 CVE-2026-27145 + * go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader + * go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors without any escaping + * go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once + * go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation + * go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64 + +------------------------------------------------------------------- Old: ---- go1.25.10.src.tar.gz New: ---- go1.25.11.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.25.spec ++++++ --- /var/tmp/diff_new_pack.9rzD4L/_old 2026-06-05 14:56:59.316089191 +0200 +++ /var/tmp/diff_new_pack.9rzD4L/_new 2026-06-05 14:56:59.316089191 +0200 @@ -107,7 +107,7 @@ %endif Name: go1.25 -Version: 1.25.10 +Version: 1.25.11 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.25.10.src.tar.gz -> go1.25.11.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.25/go1.25.10.src.tar.gz /work/SRC/openSUSE:Factory/.go1.25.new.2375/go1.25.11.src.tar.gz differ: char 109, line 1
