Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.18 for openSUSE:Factory checked in at 2022-08-03 21:16:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.18 (Old) and /work/SRC/openSUSE:Factory/.go1.18.new.1533 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.18" Wed Aug 3 21:16:16 2022 rev:13 rq:992080 version:1.18.5 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.18/go1.18.changes 2022-07-14 16:33:17.276572503 +0200 +++ /work/SRC/openSUSE:Factory/.go1.18.new.1533/go1.18.changes 2022-08-03 21:16:21.411388349 +0200 @@ -1,0 +2,19 @@ +Mon Aug 1 15:40:03 UTC 2022 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.18.5 (released 2022-08-01) includes security fixes to the + encoding/gob and math/big packages, as well as bug fixes to the + compiler, the go command, the runtime, and the testing package. + Refs boo#1193742 go1.18 release tracking + CVE-2022-32189 + * boo#1202035 CVE-2022-32189 go#53871 + * go#54095 math/big: index out of range in Float.GobDecode + * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes" + * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off + * go#53852 cmd/compile: internal compiler error: assertion failed + * go#53847 runtime: modified timer results in extreme cpu load + * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags + * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang + * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process." + * go#52961 cmd/compile: miscompilation in pointer operations + +------------------------------------------------------------------- Old: ---- go1.18.4.src.tar.gz New: ---- go1.18.5.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.18.spec ++++++ --- /var/tmp/diff_new_pack.PLo4kC/_old 2022-08-03 21:16:22.163390323 +0200 +++ /var/tmp/diff_new_pack.PLo4kC/_new 2022-08-03 21:16:22.167390333 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.18 -Version: 1.18.4 +Version: 1.18.5 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.18.4.src.tar.gz -> go1.18.5.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.18/go1.18.4.src.tar.gz /work/SRC/openSUSE:Factory/.go1.18.new.1533/go1.18.5.src.tar.gz differ: char 99, line 1