Hello community, here is the log from the commit of package go for openSUSE:Factory checked in at 2017-10-26 18:39:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go (Old) and /work/SRC/openSUSE:Factory/.go.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go" Thu Oct 26 18:39:01 2017 rev:83 rq:535890 version:1.9.1 Changes: -------- --- /work/SRC/openSUSE:Factory/go/go.changes 2017-10-13 14:08:12.405021027 +0200 +++ /work/SRC/openSUSE:Factory/.go.new/go.changes 2017-10-26 18:39:02.482909251 +0200 @@ -1,0 +2,6 @@ +Sat Oct 21 11:39:37 UTC 2017 - asa...@suse.com + +- Install $GOROOT/lib packages, to include upstream files such as the timezone + database. bsc#1064522 + +------------------------------------------------------------------- @@ -6,2 +12,10 @@ - go1.9.1 (released 2017/10/04) includes two security fixes. See the Go 1.9.1 - milestone on our issue tracker for details. + go1.9.1 (released 2017/10/04) includes two security fixes. See + the Go 1.9.1 milestone on our issue tracker for details. + + Fixes included: + + * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS + servers (CVE-2017-15042, bsc#1062087) + + * cmd/go: arbitrary code execution during “go get” or “go get -d” + (CVE-2017-15041, bsc#1062085) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go.spec ++++++ --- /var/tmp/diff_new_pack.DLjRKJ/_old 2017-10-26 18:39:03.778848793 +0200 +++ /var/tmp/diff_new_pack.DLjRKJ/_new 2017-10-26 18:39:03.778848793 +0200 @@ -299,10 +299,12 @@ for i in $(ls %{buildroot}/usr/share/go/%{go_api}/src);do ln -s /usr/share/go/%{go_api}/src/$i $GOROOT/src/$i done +# add lib files that are needed (such as the timezone database). +install -d $GOROOT/lib +find lib -type f -exec install -D -m644 {} $GOROOT/{} \; # copy document templates, packages, obj libs and command utilities mkdir -p $GOROOT/bin -mkdir -p $GOROOT/lib # remove bootstrap rm -rf pkg/bootstrap mv pkg $GOROOT