Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.19 for openSUSE:Factory checked in at 2022-10-10 18:43:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.19 (Old) and /work/SRC/openSUSE:Factory/.go1.19.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.19" Mon Oct 10 18:43:54 2022 rev:6 rq:1008078 version:1.19.2 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.19/go1.19.changes 2022-09-08 14:21:35.410380039 +0200 +++ /work/SRC/openSUSE:Factory/.go1.19.new.2275/go1.19.changes 2022-10-10 18:44:14.750827755 +0200 @@ -1,0 +2,20 @@ +Tue Oct 4 18:21:57 UTC 2022 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.19.2 (released 2022-10-04) includes security fixes to the + archive/tar, net/http/httputil, and regexp packages, as well as + bug fixes to the compiler, the linker, the runtime, and the + go/types package. + Refs boo#1200441 go1.19 release tracking + CVE-2022-41715 CVE-2022-2879 CVE-2022-2880 + * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps + * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers + * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters + * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found + * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4 + * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API + * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression) + * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation + * go#54917 cmd/compile: Value live at entry + * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686) + +------------------------------------------------------------------- Old: ---- go1.19.1.src.tar.gz New: ---- go1.19.2.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.19.spec ++++++ --- /var/tmp/diff_new_pack.w9IscV/_old 2022-10-10 18:44:15.526829425 +0200 +++ /var/tmp/diff_new_pack.w9IscV/_new 2022-10-10 18:44:15.530829434 +0200 @@ -136,7 +136,7 @@ %endif Name: go1.19 -Version: 1.19.1 +Version: 1.19.2 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.19.1.src.tar.gz -> go1.19.2.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.19/go1.19.1.src.tar.gz /work/SRC/openSUSE:Factory/.go1.19.new.2275/go1.19.2.src.tar.gz differ: char 120, line 1
