Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.21 for openSUSE:Factory checked in at 2023-10-12 23:39:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.21 (Old) and /work/SRC/openSUSE:Factory/.go1.21.new.1807 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.21" Thu Oct 12 23:39:04 2023 rev:7 rq:1116743 version:1.21.3 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.21/go1.21.changes 2023-10-08 12:16:22.205954451 +0200 +++ /work/SRC/openSUSE:Factory/.go1.21.new.1807/go1.21.changes 2023-10-12 23:39:36.715473885 +0200 @@ -1,0 +2,9 @@ +Tue Oct 10 18:27:08 UTC 2023 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.21.3 (released 2023-10-10) includes a security fix to the + net/http package. + Refs boo#1212475 go1.21 release tracking + CVE-2023-39325 CVE-2023-44487 + * go#63427 go#63417 boo#1216109 security: fix CVE-2023-39325 CVE-2023-44487 net/http: rapid stream resets can cause excessive work + +------------------------------------------------------------------- Old: ---- go1.21.2.src.tar.gz New: ---- go1.21.3.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.21.spec ++++++ --- /var/tmp/diff_new_pack.fpxg2k/_old 2023-10-12 23:39:37.435499948 +0200 +++ /var/tmp/diff_new_pack.fpxg2k/_new 2023-10-12 23:39:37.439500094 +0200 @@ -126,7 +126,7 @@ %endif Name: go1.21 -Version: 1.21.2 +Version: 1.21.3 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.21.2.src.tar.gz -> go1.21.3.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.21/go1.21.2.src.tar.gz /work/SRC/openSUSE:Factory/.go1.21.new.1807/go1.21.3.src.tar.gz differ: char 13, line 1
