Hello community, here is the log from the commit of package go1.12 for openSUSE:Factory checked in at 2019-08-15 12:27:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.12 (Old) and /work/SRC/openSUSE:Factory/.go1.12.new.9556 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.12" Thu Aug 15 12:27:51 2019 rev:10 rq:723157 version:1.12.8 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.12/go1.12.changes 2019-07-29 17:23:55.730356905 +0200 +++ /work/SRC/openSUSE:Factory/.go1.12.new.9556/go1.12.changes 2019-08-15 12:27:56.338568194 +0200 @@ -1,0 +2,10 @@ +Tue Aug 13 20:52:13 UTC 2019 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.12.8 (released 2019/08/13) includes security fixes to the + net/http and net/url packages addressing: + CVE-2019-9512 CVE-2019-9514 CVE-2019-14809 + Refs boo#1141689. + * go#33633 net/url: URL.Parse Multiple Parsing Issues + * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation + +------------------------------------------------------------------- @@ -11,0 +22 @@ + Refs boo#1141689. @@ -35,0 +47 @@ + Refs boo#1141689. @@ -61,0 +74 @@ + Refs boo#1141689. @@ -84,0 +98 @@ + Refs boo#1141689. @@ -92,0 +107 @@ + Refs boo#1141689. @@ -128,0 +144 @@ + Refs boo#1141689. @@ -151,0 +168 @@ + Refs boo#1141689. Old: ---- go1.12.7.src.tar.gz New: ---- go1.12.8.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.12.spec ++++++ --- /var/tmp/diff_new_pack.r9ecfk/_old 2019-08-15 12:27:57.622567873 +0200 +++ /var/tmp/diff_new_pack.r9ecfk/_new 2019-08-15 12:27:57.626567872 +0200 @@ -119,7 +119,7 @@ %endif Name: go1.12 -Version: 1.12.7 +Version: 1.12.8 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.12.7.src.tar.gz -> go1.12.8.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.12/go1.12.7.src.tar.gz /work/SRC/openSUSE:Factory/.go1.12.new.9556/go1.12.8.src.tar.gz differ: char 15, line 1
