Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-03-05 14:43:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1958 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.17" Sat Mar 5 14:43:00 2022 rev:9 rq:959308 version:1.17.8 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes 2022-02-21 17:46:32.603593014 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1958/go1.17.changes 2022-03-05 14:43:06.467696236 +0100 @@ -1,0 +2,16 @@ +Thu Mar 3 21:51:40 UTC 2022 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.17.8 (released 2022-03-03) includes a security fix to the + regexp/syntax package, as well as bug fixes to the compiler, + runtime, the go command, and the crypto/x509, and net packages. + Refs boo#1190649 go1.17 release tracking + CVE-2022-24921 + * boo#1196732 go#51112 CVE-2022-24921 + * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp + * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists + * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations + * go#51162 net: use EDNS to increase DNS packet size [freeze exception] + * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two + * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18 + +------------------------------------------------------------------- Old: ---- go1.17.7.src.tar.gz New: ---- go1.17.8.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.17.spec ++++++ --- /var/tmp/diff_new_pack.qob1dC/_old 2022-03-05 14:43:07.091696393 +0100 +++ /var/tmp/diff_new_pack.qob1dC/_new 2022-03-05 14:43:07.099696395 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version: 1.17.7 +Version: 1.17.8 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.17.7.src.tar.gz -> go1.17.8.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.17/go1.17.7.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1958/go1.17.8.src.tar.gz differ: char 144, line 1
