Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-04-16 00:13:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1941 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.17" Sat Apr 16 00:13:44 2022 rev:13 rq:969625 version:1.17.9 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes 2022-04-10 19:05:05.174710950 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1941/go1.17.changes 2022-04-16 00:14:01.497631132 +0200 @@ -1,0 +2,17 @@ +Tue Apr 12 17:42:46 UTC 2022 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.17.9 (released 2022-04-12) includes security fixes to the + crypto/elliptic and encoding/pem packages, as well as bug fixes + to the linker and runtime. + Refs boo#1190649 go1.17 release tracking + CVE-2022-24675 CVE-2022-28327 + * boo#1198423 go#51853 CVE-2022-24675 + * go#52036 encoding/pem: stack overflow + * boo#1198424 go#52075 CVE-2022-28327 + * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes + * go#51736 plugin: tls handshake panic: unreachable method called. linker bug? + * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0 + * go#51458 runtime: finalizer call has wrong frame size + * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed + +------------------------------------------------------------------- Old: ---- go1.17.8.src.tar.gz New: ---- go1.17.9.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.17.spec ++++++ --- /var/tmp/diff_new_pack.e8yx7u/_old 2022-04-16 00:14:02.257632147 +0200 +++ /var/tmp/diff_new_pack.e8yx7u/_new 2022-04-16 00:14:02.261632152 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version: 1.17.8 +Version: 1.17.9 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.17.8.src.tar.gz -> go1.17.9.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.17/go1.17.8.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1941/go1.17.9.src.tar.gz differ: char 31, line 1
