commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2024-02-28 19:45:20 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1770 (New) Package is "go1.17" Wed Feb 28 19:45:20 2024 rev:23 rq:1152297 version:1.17.13 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2023-04-18 15:51:57.633098000 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1770/go1.17.changes 2024-02-28 19:45:41.166680435 +0100 @@ -1,0 +2,5 @@ +Tue Feb 27 11:33:15 UTC 2024 - Dominique Leuenberger + +- Use %patch -P N instead of deprecated %patchN. + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.iNQ63V/_old 2024-02-28 19:45:41.854705465 +0100 +++ /var/tmp/diff_new_pack.iNQ63V/_new 2024-02-28 19:45:41.858705610 +0100 @@ -230,14 +230,14 @@ # go %setup -q -n go -%patch7 -p1 +%patch -P 7 -p1 %if %{with gccgo} # Currently gcc-go does not manage an update-alternatives entry and will # never be symlinked as "go", even if gcc-go is the only installed go toolchain. # Patch go bootstrap scripts to find hardcoded go-(gcc-go-version) e.g. go-8 # Substitute defined gcc_go_version into gcc-go.patch sed -i "s/\$gcc_go_version/%{gcc_go_version}/" $RPM_SOURCE_DIR/gcc-go.patch -%patch8 -p1 +%patch -P 8 -p1 %endif cp %{SOURCE4} .
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2023-04-18 15:51:56 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.2023 (New) Package is "go1.17" Tue Apr 18 15:51:56 2023 rev:22 rq:1079833 version:1.17.13 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2023-04-15 22:32:54.053452695 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.2023/go1.17.changes 2023-04-18 15:51:57.633098000 +0200 @@ -1,0 +2,38 @@ +Fri Apr 14 23:41:22 UTC 2023 - Jeff Kowalczyk + +- Build subpackage go1.x-libstd compiled shared object libstd.so + only on Tumbleweed at this time. + Refs jsc#PED-1962 + +--- +Fri Apr 14 23:20:06 UTC 2023 - Jeff Kowalczyk + +- Add subpackage go1.x-libstd for compiled shared object libstd.so. + Refs jsc#PED-1962 + * Main go1.x package included libstd.so in previous versions + * Split libstd.so into subpackage that can be installed standalone + * Continues the slimming down of main go1.x package by 40 Mb + * Experimental and not recommended for general use, Go currently has no ABI + * Upstream Go has not committed to support buildmode=shared long-term + * Do not use in packaging, build static single binaries (the default) + * Upstream Go go1.x binary releases do not include libstd.so + * go1.x Suggests go1.x-libstd so not installed by default Recommends + * go1.x-libstd does not Require: go1.x so can install standalone + * Provides go-libstd unversioned package name + * Fix build step -buildmode=shared std to omit -linkshared +- Packaging improvements: + * go1.x Suggests go1.x-doc so not installed by default Recommends + * Use Group: Development/Languages/Go instead of Other + +--- +Fri Apr 14 23:06:51 UTC 2023 - Jeff Kowalczyk + +- Improvements to go1.x packaging spec: + * On Tumbleweed bootstrap with current default gcc13 and gccgo118 + * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap +using go1.x package (%bcond_without gccgo). This is no longer +needed on current SLE-12:Update and removing will consolidate +the build configurations used. + * Change source URLs to go.dev as per Go upstream + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.Bdps8J/_old 2023-04-18 15:51:58.893105256 +0200 +++ /var/tmp/diff_new_pack.Bdps8J/_new 2023-04-18 15:51:58.897105279 +0200 @@ -24,29 +24,25 @@ %undefine _build_create_debug %define __arch_install_post export NO_BRP_STRIP_DEBUG=true NO_BRP_AR=true -# Used to bootstrap go toolchain with specific existing package -%define go_bootstrap_version go1.16 - -# Used to bootstrap go toolchain using specific version of gcc-go +# Specify Go toolchain version used to bootstrap this package's Go toolchain +# go_bootstrap_version bootstrap go toolchain with specific existing go1.x package +# gcc_go_version bootstrap go toolchain with specific version of gcc-go %if 0%{?suse_version} > 1500 # openSUSE Tumbleweed +# Usually ahead of bootstrap version specified by upstream Go +# Use Tumbleweed default gccgo and N-1 go1.x for testing %define gcc_go_version 13 +%define go_bootstrap_version go1.16 %else +# Use gccgo and go1.x specified by upstream Go %define gcc_go_version 11 +%define go_bootstrap_version go1.16 %endif # Bootstrap go toolchain using existing go package go_bootstrap_version # To bootstrap using gccgo use '--with gccgo' %bcond_with gccgo -# Boostrapping using existing go package can fail on certain SLE-12 architectures -# Override here as needed -%if 0%{?suse_version} == 1315 -%ifarch aarch64 ppc64le ppc64 s390x -%bcond_without gccgo -%endif -%endif - # gccgo on ppc64le with default PIE enabled fails with: # error while loading shared libraries: # R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range @@ -58,9 +54,7 @@ #!BuildIgnore: gcc-PIE %endif -# Build go-race only on platforms where it's supported (both amd64 and aarch64 -# requires SLE15-or-later because of C++14, and ppc64le doesn't build at all -# on openSUSE yet). +# Build go-race only on platforms where C++14 is supported (SLE-15) %if 0%{?suse_version} >= 1500 || 0%{?sle_version} >= 15 %define tsan_arch x86_64 aarch64 %else @@ -138,13 +132,15 @@ Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause -Group: Development/Languages/Other -URL:http://golang.org -Source:
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2023-04-15 22:32:51 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.19717 (New) Package is "go1.17" Sat Apr 15 22:32:51 2023 rev:21 rq:1079521 version:1.17.13 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-08-25 15:08:54.845192280 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.19717/go1.17.changes 2023-04-15 22:32:54.053452695 +0200 @@ -1,0 +2,5 @@ +Thu Apr 13 04:58:20 UTC 2023 - Martin Liška + +- Use gcc13 compiler for Tumbleweed. + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.1RB57l/_old 2023-04-15 22:32:54.657456180 +0200 +++ /var/tmp/diff_new_pack.1RB57l/_new 2023-04-15 22:32:54.661456203 +0200 @@ -1,7 +1,7 @@ # # spec file for package go1.17 # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -30,7 +30,7 @@ # Used to bootstrap go toolchain using specific version of gcc-go %if 0%{?suse_version} > 1500 # openSUSE Tumbleweed -%define gcc_go_version 12 +%define gcc_go_version 13 %else %define gcc_go_version 11 %endif
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-08-25 15:08:51 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.2083 (New) Package is "go1.17" Thu Aug 25 15:08:51 2022 rev:20 rq:999106 version:1.17.13 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-08-24 15:10:34.064468607 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.2083/go1.17.changes 2022-08-25 15:08:54.845192280 +0200 @@ -1,0 +2,5 @@ +Tue Aug 23 19:49:42 UTC 2022 - Andreas Schwab + +- Don't build with shared on riscv64 for < go1.18 + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.DiHjlZ/_old 2022-08-25 15:08:55.945194603 +0200 +++ /var/tmp/diff_new_pack.DiHjlZ/_new 2022-08-25 15:08:55.953194621 +0200 @@ -104,7 +104,7 @@ %else %define with_shared 0 %endif -%ifarch ppc64 +%ifarch ppc64 riscv64 %define with_shared 0 %endif # setup go_arch (BSD-like scheme)
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-08-24 15:10:31 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.2083 (New) Package is "go1.17" Wed Aug 24 15:10:31 2022 rev:19 rq:998734 version:1.17.13 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-08-03 21:16:20.187385137 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.2083/go1.17.changes 2022-08-24 15:10:34.064468607 +0200 @@ -1,0 +2,13 @@ +Mon Aug 22 20:44:19 UTC 2022 - Jeff Kowalczyk + +- Define go_bootstrap_version go1.16 without suse_version checks +- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere + +--- +Thu Aug 18 08:36:32 UTC 2022 - Dirk M??ller + +- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is + bootstrapped using gcc-go 11 or 12. This allows dropping older + versions of Go from Factory. + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.1kp6za/_old 2022-08-24 15:10:34.788470237 +0200 +++ /var/tmp/diff_new_pack.1kp6za/_new 2022-08-24 15:10:34.796470254 +0200 @@ -24,34 +24,23 @@ %undefine _build_create_debug %define __arch_install_post export NO_BRP_STRIP_DEBUG=true NO_BRP_AR=true -%if 0%{?suse_version} == 1315 -%define gcc_go_version 8 -%define go_bootstrap_version go1.4 -%else -%ifarch riscv64 -%define go_bootstrap_version go1.14 -%else -%define go_bootstrap_version go1.9 -%endif -%if 0%{?sle_version} == 15 -# SLE15 or Leap 15.x -%define gcc_go_version 7 +# Used to bootstrap go toolchain with specific existing package +%define go_bootstrap_version go1.16 + +# Used to bootstrap go toolchain using specific version of gcc-go +%if 0%{?suse_version} > 1500 +# openSUSE Tumbleweed +%define gcc_go_version 12 %else -%define gcc_go_version 9 -%endif +%define gcc_go_version 11 %endif -# By default use go and not gccgo +# Bootstrap go toolchain using existing go package go_bootstrap_version +# To bootstrap using gccgo use '--with gccgo' %bcond_withgccgo -# The fallback boostrap method via %%{go_bootstrap_version} would work for Leap -# but we don't have %%{go_bootstrap_version} in there. Same for SLE15+ -#if ( 0%{?suse_version} < 1550 && 0%{?is_opensuse} ) || ( 0%{?suse_version} >= 1500 && ! 0%{?is_opensuse} ) -#bcond_without gccgo -#endif - -# The fallback bootstrap method via go1.4 doesn't work -# for aarch64 nor ppc64le because go 1.4 did not support that architecture. +# Boostrapping using existing go package can fail on certain SLE-12 architectures +# Override here as needed %if 0%{?suse_version} == 1315 %ifarch aarch64 ppc64le ppc64 s390x %bcond_without gccgo @@ -343,14 +332,14 @@ %endif # update-alternatives - mkdir -p %{buildroot}%{_sysconfdir}/alternatives - mkdir -p %{buildroot}%{_bindir} - mkdir -p %{buildroot}%{_sysconfdir}/profile.d - mkdir -p %{buildroot}%{_sysconfdir}/gdbinit.d - touch %{buildroot}%{_sysconfdir}/alternatives/{go,gofmt,go.gdb} - ln -sf %{_sysconfdir}/alternatives/go %{buildroot}%{_bindir}/go - ln -sf %{_sysconfdir}/alternatives/gofmt %{buildroot}%{_bindir}/gofmt - ln -sf %{_sysconfdir}/alternatives/go.gdb %{buildroot}%{_sysconfdir}/gdbinit.d/go.gdb +mkdir -p %{buildroot}%{_sysconfdir}/alternatives +mkdir -p %{buildroot}%{_bindir} +mkdir -p %{buildroot}%{_sysconfdir}/profile.d +mkdir -p %{buildroot}%{_sysconfdir}/gdbinit.d +touch %{buildroot}%{_sysconfdir}/alternatives/{go,gofmt,go.gdb} +ln -sf %{_sysconfdir}/alternatives/go %{buildroot}%{_bindir}/go +ln -sf %{_sysconfdir}/alternatives/gofmt %{buildroot}%{_bindir}/gofmt +ln -sf %{_sysconfdir}/alternatives/go.gdb %{buildroot}%{_sysconfdir}/gdbinit.d/go.gdb # documentation and examples # fix documetation permissions (rpmlint warning)
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-08-03 21:16:14 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1533 (New) Package is "go1.17" Wed Aug 3 21:16:14 2022 rev:18 rq:992079 version:1.17.13 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-07-14 16:33:16.152571450 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1533/go1.17.changes 2022-08-03 21:16:20.187385137 +0200 @@ -1,0 +2,15 @@ +Mon Aug 1 15:40:03 UTC 2022 - Jeff Kowalczyk + +- go1.17.13 (released 2022-08-01) includes security fixes to the + encoding/gob and math/big packages, as well as bug fixes to the + compiler and the runtime. + Refs boo#1190649 go1.17 release tracking + CVE-2022-32189 + * boo#1202035 CVE-2022-32189 go#53871 + * go#54094 math/big: index out of range in Float.GobDecode + * go#53846 runtime: modified timer results in extreme cpu load + * go#53617 cmd/compile: condition in for loop body is incorrectly optimised away + * go#53111 runtime: gentraceback() dead loop on arm64 casued the process hang + * go#52960 cmd/compile: miscompilation in pointer operations + +--- Old: go1.17.12.src.tar.gz New: go1.17.13.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.8M5i7p/_old 2022-08-03 21:16:20.811386774 +0200 +++ /var/tmp/diff_new_pack.8M5i7p/_new 2022-08-03 21:16:20.819386795 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version:1.17.12 +Version:1.17.13 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.12.src.tar.gz -> go1.17.13.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.12.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1533/go1.17.13.src.tar.gz differ: char 17, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-07-14 16:33:12 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1523 (New) Package is "go1.17" Thu Jul 14 16:33:12 2022 rev:17 rq:988808 version:1.17.12 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-06-03 14:15:46.453246929 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1523/go1.17.changes 2022-07-14 16:33:16.152571450 +0200 @@ -1,0 +2,35 @@ +Tue Jul 12 20:28:01 UTC 2022 - Jeff Kowalczyk + +- go1.17.12 (released 2022-07-12) includes security fixes to the + compress/gzip, encoding/gob, encoding/xml, go/parser, io/fs, + net/http, and path/filepath packages, as well as bug fixes to the + compiler, the go command, the runtime, and the runtime/metrics + package. + Refs boo#1190649 go1.17 release tracking + CVE-2022-1705 CVE-2022-32148 CVE-2022-30631 CVE-2022-30633 CVE-2022-28131 CVE-2022-30635 CVE-2022-30632 CVE-2022-30630 CVE-2022-1962 + * boo#1201434 CVE-2022-1705 go#53188 + * go#53432 net/http: improper sanitization of Transfer-Encoding header + * boo#1201436 CVE-2022-32148 go#53423 + * go#53620 net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working + * boo#1201437 CVE-2022-30631 go#53168 + * go#53717 compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) + * boo#1201440 CVE-2022-30633 go#53611 + * go#53715 encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633) + * boo#1201443 CVE-2022-28131 go#53614 + * go#53711 encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131) + * boo#1201444 CVE-2022-30635 go#53615 + * go#53709 encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635) + * boo#1201445 CVE-2022-30632 go#53416 + * go#53713 path/filepath: stack exhaustion in Glob (CVE-2022-30632) + * boo#1201447 CVE-2022-30630 go#53415 + * go#53719 io/fs: stack exhaustion in Glob (CVE-2022-30630) + * boo#1201448 CVE-2022-1962 go#53616 + * go#53707 go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962) + * go#53612 syscall: NewCallback triggers data race on Windows when used from different goroutine + * go#53589 runtime/metrics: data race detected in Read + * go#53470 cmd/compile: internal compiler error: width not calculated: int128 + * go#53050 misc/cgo/test: failure with gcc 10 + * go#52688 runtime: total allocation stats are managed in a uintptr which can quickly wrap around on 32-bit architectures + * go#51351 cmd/go: "v1.x.y is not a tag" when .gitconfig sets log.decorate to full + +--- Old: go1.17.11.src.tar.gz New: go1.17.12.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.G9suKU/_old 2022-07-14 16:33:16.708571971 +0200 +++ /var/tmp/diff_new_pack.G9suKU/_new 2022-07-14 16:33:16.712571975 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version:1.17.11 +Version:1.17.12 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.11.src.tar.gz -> go1.17.12.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.11.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1523/go1.17.12.src.tar.gz differ: char 31, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-06-03 14:15:32 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1548 (New) Package is "go1.17" Fri Jun 3 14:15:32 2022 rev:16 rq:980419 version:1.17.11 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-05-12 22:58:17.156629692 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1548/go1.17.changes 2022-06-03 14:15:46.453246929 +0200 @@ -1,0 +2,22 @@ +Wed Jun 1 17:51:26 UTC 2022 - Jeff Kowalczyk + +- go1.17.11 (released 2022-06-01) includes security fixes to the + crypto/rand, crypto/tls, os/exec, and path/filepath packages, as + well as bug fixes to the crypto/tls package. + Refs boo#1190649 go1.17 release tracking + CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804 + * boo#1200134 go#52561 CVE-2022-30634 + * go#52932 crypto/rand: Read hangs when passed buffer larger than 1<<32 - 1 + * boo#1200135 go#52814 CVE-2022-30629 + * go#52832 crypto/tls: randomly generate ticket_age_add + * boo#1200136 go#52574 CVE-2022-30580 + * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset + * boo#1200137 go#52476 CVE-2022-29804 + * go#52478 path/filepath: Clean(.\c:) returns c: on Windows + * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17 + * go#52826 runtime: TestGcSys is still flaky + * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12 + * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0" + * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11 + +--- Old: go1.17.10.src.tar.gz New: go1.17.11.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.PsRTX6/_old 2022-06-03 14:15:47.161247849 +0200 +++ /var/tmp/diff_new_pack.PsRTX6/_new 2022-06-03 14:15:47.161247849 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version:1.17.10 +Version:1.17.11 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.10.src.tar.gz -> go1.17.11.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.10.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1548/go1.17.11.src.tar.gz differ: char 19, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-05-12 22:57:59 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1538 (New) Package is "go1.17" Thu May 12 22:57:59 2022 rev:15 rq:976172 version:1.17.10 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-05-05 23:05:50.733516267 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1538/go1.17.changes 2022-05-12 22:58:17.156629692 +0200 @@ -1,0 +2,18 @@ +Tue May 10 22:25:54 UTC 2022 - Jeff Kowalczyk + +- go1.17.10 (released 2022-05-10) includes security fixes to the + syscall package, as well as bug fixes to the compiler, runtime, + and the crypto/x509 and net/http/httptest packages. + Refs boo#1190649 go1.17 release tracking + CVE-2022-29526 + * boo#1199413 go#52313 CVE-2022-29526 + * go#52439 syscall: Faccessat checks wrong group + * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error + * go#52095 cmd/compile: fails to compile very long files starting go1.17 + * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm + * go#52306 sync: TestWaitGroupMisuse2 is flaky + * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge + * go#52455 net/http/httptest: race in Close + * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders + +--- Old: go1.17.9.src.tar.gz New: go1.17.10.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.Mo8Qrm/_old 2022-05-12 22:58:17.988630809 +0200 +++ /var/tmp/diff_new_pack.Mo8Qrm/_new 2022-05-12 22:58:17.992630814 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version:1.17.9 +Version:1.17.10 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.9.src.tar.gz -> go1.17.10.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.9.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1538/go1.17.10.src.tar.gz differ: char 11, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-05-05 23:05:16 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1538 (New) Package is "go1.17" Thu May 5 23:05:16 2022 rev:14 rq:974491 version:1.17.9 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-04-16 00:14:01.497631132 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1538/go1.17.changes 2022-05-05 23:05:50.733516267 +0200 @@ -1,0 +2,10 @@ +Mon May 2 08:43:22 UTC 2022 - Martin Li??ka + +- Remove remaining use of gold linker when bootstrapping with + gccgo. The binutils-gold package will be removed in the future. + * History: go1.8.3 2017-06-18 added conditional if gccgo defined +BuildRequires: binutils-gold for arches other than s390x + * No information available why binutils-gold was used initially + * Unrelated to upstream recent hardcoded gold dependency for ARM + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.opv5Hi/_old 2022-05-05 23:05:51.377517071 +0200 +++ /var/tmp/diff_new_pack.opv5Hi/_new 2022-05-05 23:05:51.381517075 +0200 @@ -164,9 +164,6 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-build # boostrap %if %{with gccgo} -%ifnarch s390 s390x -BuildRequires: binutils-gold -%endif BuildRequires: gcc%{gcc_go_version}-go %else # no gcc-go
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-04-16 00:13:44 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1941 (New) Package is "go1.17" Sat Apr 16 00:13:44 2022 rev:13 rq:969625 version:1.17.9 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-04-10 19:05:05.174710950 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1941/go1.17.changes 2022-04-16 00:14:01.497631132 +0200 @@ -1,0 +2,17 @@ +Tue Apr 12 17:42:46 UTC 2022 - Jeff Kowalczyk + +- go1.17.9 (released 2022-04-12) includes security fixes to the + crypto/elliptic and encoding/pem packages, as well as bug fixes + to the linker and runtime. + Refs boo#1190649 go1.17 release tracking + CVE-2022-24675 CVE-2022-28327 + * boo#1198423 go#51853 CVE-2022-24675 + * go#52036 encoding/pem: stack overflow + * boo#1198424 go#52075 CVE-2022-28327 + * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes + * go#51736 plugin: tls handshake panic: unreachable method called. linker bug? + * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0 + * go#51458 runtime: finalizer call has wrong frame size + * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed + +--- Old: go1.17.8.src.tar.gz New: go1.17.9.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.e8yx7u/_old 2022-04-16 00:14:02.257632147 +0200 +++ /var/tmp/diff_new_pack.e8yx7u/_new 2022-04-16 00:14:02.261632152 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version:1.17.8 +Version:1.17.9 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.8.src.tar.gz -> go1.17.9.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.8.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1941/go1.17.9.src.tar.gz differ: char 31, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-04-10 19:05:04 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1900 (New) Package is "go1.17" Sun Apr 10 19:05:04 2022 rev:12 rq:967629 version:1.17.8 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-04-05 19:54:58.486553783 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1900/go1.17.changes 2022-04-10 19:05:05.174710950 +0200 @@ -1,0 +2,20 @@ +Thu Apr 7 23:57:47 UTC 2022 - Jeff Kowalczyk + +- Template gcc-go.patch to substitute gcc_go_version and eliminate + multiple similar patches each with hardcoded gcc go binary name. + gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate + for current lack of gcc-go update-alternatives usage. + * add gcc-go.patch + * drop gcc6-go.patch + * drop gcc7-go.patch + +--- +Thu Apr 7 17:51:56 UTC 2022 - Jeff Kowalczyk + +- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go. + gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or + go1.18 on SLE-12 aarch64 ppc64le or s390x. + * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0): +undefined reference to `__go_pimt__I4_DiagFrN4_boolee3 + +--- Old: gcc6-go.patch gcc7-go.patch New: gcc-go.patch Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.xIjjqT/_old 2022-04-10 19:05:06.030701474 +0200 +++ /var/tmp/diff_new_pack.xIjjqT/_new 2022-04-10 19:05:06.034701429 +0200 @@ -25,7 +25,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true NO_BRP_AR=true %if 0%{?suse_version} == 1315 -%define gcc_go_version 6 +%define gcc_go_version 8 %define go_bootstrap_version go1.4 %else %ifarch riscv64 @@ -159,9 +159,8 @@ Source100: llvm-%{tsan_commit}.tar.xz # PATCH-FIX-OPENSUSE: https://go-review.googlesource.com/c/go/+/391115 Patch7: dont-force-gold-on-arm64.patch -# PATCH-FIX-UPSTREAM marguer...@opensuse.org - find /usr/bin/go-5 when bootstrapping with gcc5-go -Patch8: gcc6-go.patch -Patch9: gcc7-go.patch +# PATCH-FIX-UPSTREAM marguer...@opensuse.org - find /usr/bin/go-8 when bootstrapping with gcc8-go +Patch8: gcc-go.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build # boostrap %if %{with gccgo} @@ -234,13 +233,13 @@ %setup -q -n go %patch7 -p1 %if %{with gccgo} -%if 0%{?gcc_go_version} == 6 +# Currently gcc-go does not manage an update-alternatives entry and will +# never be symlinked as "go", even if gcc-go is the only installed go toolchain. +# Patch go bootstrap scripts to find hardcoded go-(gcc-go-version) e.g. go-8 +# Substitute defined gcc_go_version into gcc-go.patch +sed -i "s/\$gcc_go_version/%{gcc_go_version}/" $RPM_SOURCE_DIR/gcc-go.patch %patch8 -p1 %endif -%if 0%{?gcc_go_version} == 7 -%patch9 -p1 -%endif -%endif cp %{SOURCE4} . ++ gcc-go.patch ++ Index: go/src/cmd/dist/buildtool.go === --- go.orig/src/cmd/dist/buildtool.go +++ go/src/cmd/dist/buildtool.go @@ -190,7 +190,7 @@ func bootstrapBuildTools() { // only applies to the final cmd/go binary, but that's OK: if this is Go 1.10 // or later we don't need to disable inlining to work around bugs in the Go 1.4 compiler. cmd := []string{ - pathf("%s/bin/go", goroot_bootstrap), + pathf("%s/bin/go-$gcc_go_version", goroot_bootstrap), "install", "-gcflags=-l", "-tags=math_big_pure_go compiler_bootstrap", Index: go/src/make.bash === --- go.orig/src/make.bash +++ go/src/make.bash @@ -60,7 +60,7 @@ # time goes when these scripts run. # # GOROOT_BOOTSTRAP: A working Go tree >= Go 1.4 for bootstrap. -# If $GOROOT_BOOTSTRAP/bin/go is missing, $(go env GOROOT) is +# If $GOROOT_BOOTSTRAP/bin/go-$gcc_go_version is missing, $(go env GOROOT) is # tried for all "go" in $PATH. $HOME/go1.4 by default. set -e @@ -162,8 +162,8 @@ fi fi done; unset IFS -if [ ! -x "$GOROOT_BOOTSTRAP/bin/go" ]; then - echo "ERROR: Cannot find $GOROOT_BOOTSTRAP/bin/go." >&2 +if [ ! -x "$GOROOT_BOOTSTRAP/bin/go-$gcc_go_version" ]; then + echo "ERROR: Cannot find $GOROOT_BOOTSTRAP/bin/go-$gcc_go_version." >&2 echo "Set \$GOROOT_BOOTSTRAP to a working Go tree >= Go 1.4." >&2 exit 1 fi @@ -181,7 +181,7 @@ exit 1 fi rm -f cmd/dist/dist
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-04-05 19:54:56 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1900 (New) Package is "go1.17" Tue Apr 5 19:54:56 2022 rev:11 rq:966744 version:1.17.8 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-03-18 16:41:47.841166771 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1900/go1.17.changes 2022-04-05 19:54:58.486553783 +0200 @@ -1,0 +2,10 @@ +Fri Mar 11 23:37:41 UTC 2022 - Jeff Kowalczyk + +- Add %define go_label as a configurable Go toolchain directory + * go_label can be used to package multiple Go toolchains with +the same go_api + * go_label should be defined as go_api with an optional suffix +e.g. %{go_api} or %{go_api}-foo + * Default go_label = go_api makes no changes to package layout + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.KZMAxY/_old 2022-04-05 19:55:00.554530726 +0200 +++ /var/tmp/diff_new_pack.KZMAxY/_new 2022-04-05 19:55:00.558530682 +0200 @@ -89,8 +89,18 @@ # more details. %define tsan_commit 89f7ccea6f6488c443655880229c54db1f180153 +# go_api is the major version of Go. +# Used by go1.x packages and go metapackage for: +# RPM Provides: golang(API), RPM Requires: and rpm_vercmp +# as well as derived variables such as go_label. %define go_api 1.17 +# go_label is the configurable Go toolchain directory name. +# Used for packaging multiple Go toolchains with the same go_api. +# go_label should be defined as go_api with optional suffix, e.g. +# go_api or go_api-foo +%define go_label %{go_api} + # shared library support %if "%{rpm_vercmp %{go_api} 1.5}" > "0" %if %{with gccgo} @@ -265,7 +275,7 @@ export GOARM=7 %endif export GOROOT="`pwd`" -export GOROOT_FINAL=%{_libdir}/go/%{go_api} +export GOROOT_FINAL=%{_libdir}/go/%{go_label} export GOBIN="$GOROOT/bin" mkdir -p "$GOBIN" cd src @@ -288,29 +298,29 @@ %endif %install -export GOROOT="%{buildroot}%{_libdir}/go/%{go_api}" +export GOROOT="%{buildroot}%{_libdir}/go/%{go_label}" # locations for third party libraries, see README-openSUSE for info about locations. -install -d %{buildroot}%{_datadir}/go/%{go_api}/contrib +install -d %{buildroot}%{_datadir}/go/%{go_label}/contrib install -d $GOROOT/contrib/pkg/linux_%{go_arch} -ln -s %{_libdir}/go/%{go_api}/contrib/pkg/ %{buildroot}%{_datadir}/go/%{go_api}/contrib/pkg -install -d %{buildroot}%{_datadir}/go/%{go_api}/contrib/cmd -install -d %{buildroot}%{_datadir}/go/%{go_api}/contrib/src -ln -s %{_datadir}/go/%{go_api}/contrib/src/ %{buildroot}%{_libdir}/go/%{go_api}/contrib/src +ln -s %{_libdir}/go/%{go_label}/contrib/pkg/ %{buildroot}%{_datadir}/go/%{go_label}/contrib/pkg +install -d %{buildroot}%{_datadir}/go/%{go_label}/contrib/cmd +install -d %{buildroot}%{_datadir}/go/%{go_label}/contrib/src +ln -s %{_datadir}/go/%{go_label}/contrib/src/ %{buildroot}%{_libdir}/go/%{go_label}/contrib/src install -Dm644 README.SUSE $GOROOT/contrib/ -ln -s %{_libdir}/go/%{go_api}/contrib/README.SUSE %{buildroot}%{_datadir}/go/%{go_api}/contrib/README.SUSE +ln -s %{_libdir}/go/%{go_label}/contrib/README.SUSE %{buildroot}%{_datadir}/go/%{go_label}/contrib/README.SUSE # source files for go install, godoc, etc -install -d %{buildroot}%{_datadir}/go/%{go_api} +install -d %{buildroot}%{_datadir}/go/%{go_label} for ext in *.{go,c,h,s,S,py,syso,bin}; do - find src -name ${ext} -exec install -Dm644 \{\} %{buildroot}%{_datadir}/go/%{go_api}/\{\} \; + find src -name ${ext} -exec install -Dm644 \{\} %{buildroot}%{_datadir}/go/%{go_label}/\{\} \; done # executable bash scripts called by go tool, etc -find src -name "*.bash" -exec install -Dm655 \{\} %{buildroot}%{_datadir}/go/%{go_api}/\{\} \; +find src -name "*.bash" -exec install -Dm655 \{\} %{buildroot}%{_datadir}/go/%{go_label}/\{\} \; mkdir -p $GOROOT/src -for i in $(ls %{buildroot}/usr/share/go/%{go_api}/src);do - ln -s /usr/share/go/%{go_api}/src/$i $GOROOT/src/$i +for i in $(ls %{buildroot}/usr/share/go/%{go_label}/src);do + ln -s /usr/share/go/%{go_label}/src/$i $GOROOT/src/$i done # add lib files that are needed (such as the timezone database). install -d $GOROOT/lib @@ -333,7 +343,7 @@ install -Dm644 %{SOURCE6} $GOROOT/bin/gdbinit.d/go.gdb %if "%{_lib}" == "lib64" sed -i "s/lib/lib64/" $GOROOT/bin/gdbinit.d/go.gdb -sed -i "s/\$go_api/%{go_api}/" $GOROOT/bin/gdbinit.d/go.gdb +sed -i "s/\$go_label/%{go_label}/" $GOROOT/bin/gdbinit.d/go.gdb %endif # update-alternatives @@ -352,62 +362,62 @@ # remove unwanted arch-dependant
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-03-18 16:41:38 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.25692 (New) Package is "go1.17" Fri Mar 18 16:41:38 2022 rev:10 rq:962259 version:1.17.8 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-03-05 14:43:06.467696236 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.25692/go1.17.changes 2022-03-18 16:41:47.841166771 +0100 @@ -1,0 +2,6 @@ +Wed Mar 9 17:03:28 UTC 2022 - Dirk M??ller + +- add dont-force-gold-on-arm64.patch (bsc#1183043) +- drop binutils-gold dependency + +--- New: dont-force-gold-on-arm64.patch Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.X6dQRL/_old 2022-03-18 16:41:48.461167215 +0100 +++ /var/tmp/diff_new_pack.X6dQRL/_new 2022-03-18 16:41:48.465167218 +0100 @@ -147,6 +147,8 @@ Source6:go.gdbinit # We have to compile TSAN ourselves. boo#1052528 Source100: llvm-%{tsan_commit}.tar.xz +# PATCH-FIX-OPENSUSE: https://go-review.googlesource.com/c/go/+/391115 +Patch7: dont-force-gold-on-arm64.patch # PATCH-FIX-UPSTREAM marguer...@opensuse.org - find /usr/bin/go-5 when bootstrapping with gcc5-go Patch8: gcc6-go.patch Patch9: gcc7-go.patch @@ -169,22 +171,8 @@ %endif #BNC#818502 debug edit tool of rpm fails on i586 builds BuildRequires: rpm >= 4.11.1 -# Needed on arm aarch64 to avoid -# collect2: fatal error: cannot find 'ld'- -%ifarch %arm aarch64 -BuildRequires: binutils-gold -%endif Requires(post): update-alternatives Requires(postun):update-alternatives -# Needed on arm aarch64 to avoid -# collect2: fatal error: cannot find 'ld'- -%ifarch %arm aarch64 -%if 0%{?is_opensuse} -Requires: binutils-gold -%else -Recommends: binutils-gold -%endif -%endif Requires: gcc Provides: go = %{version} Provides: go-devel = go%{version} @@ -234,6 +222,7 @@ %endif # go %setup -q -n go +%patch7 -p1 %if %{with gccgo} %if 0%{?gcc_go_version} == 6 %patch8 -p1 ++ dont-force-gold-on-arm64.patch ++ Index: go/src/cmd/link/internal/ld/lib.go === --- go.orig/src/cmd/link/internal/ld/lib.go +++ go/src/cmd/link/internal/ld/lib.go @@ -1389,28 +1389,6 @@ func (ctxt *Link) hostlink() { // Use lld to avoid errors from default linker (issue #38838) altLinker = "lld" } - - if ctxt.Arch.InFamily(sys.ARM, sys.ARM64) && buildcfg.GOOS == "linux" { - // On ARM, the GNU linker will generate COPY relocations - // even with -znocopyreloc set. - // https://sourceware.org/bugzilla/show_bug.cgi?id=19962 - // - // On ARM64, the GNU linker will fail instead of - // generating COPY relocations. - // - // In both cases, switch to gold. - altLinker = "gold" - - // If gold is not installed, gcc will silently switch - // back to ld.bfd. So we parse the version information - // and provide a useful error if gold is missing. - cmd := exec.Command(*flagExtld, "-fuse-ld=gold", "-Wl,--version") - if out, err := cmd.CombinedOutput(); err == nil { - if !bytes.Contains(out, []byte("GNU gold")) { - log.Fatalf("ARM external linker must be gold (issue #15696), but is not: %s", out) - } - } - } } if ctxt.Arch.Family == sys.ARM64 && buildcfg.GOOS == "freebsd" { // Switch to ld.bfd on freebsd/arm64.
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-03-05 14:43:00 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1958 (New) Package is "go1.17" Sat Mar 5 14:43:00 2022 rev:9 rq:959308 version:1.17.8 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-02-21 17:46:32.603593014 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1958/go1.17.changes 2022-03-05 14:43:06.467696236 +0100 @@ -1,0 +2,16 @@ +Thu Mar 3 21:51:40 UTC 2022 - Jeff Kowalczyk + +- go1.17.8 (released 2022-03-03) includes a security fix to the + regexp/syntax package, as well as bug fixes to the compiler, + runtime, the go command, and the crypto/x509, and net packages. + Refs boo#1190649 go1.17 release tracking + CVE-2022-24921 + * boo#1196732 go#51112 CVE-2022-24921 + * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp + * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists + * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations + * go#51162 net: use EDNS to increase DNS packet size [freeze exception] + * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two + * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18 + +--- Old: go1.17.7.src.tar.gz New: go1.17.8.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.qob1dC/_old 2022-03-05 14:43:07.091696393 +0100 +++ /var/tmp/diff_new_pack.qob1dC/_new 2022-03-05 14:43:07.099696395 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.7 +Version:1.17.8 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.7.src.tar.gz -> go1.17.8.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.7.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1958/go1.17.8.src.tar.gz differ: char 144, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-02-21 17:46:01 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1958 (New) Package is "go1.17" Mon Feb 21 17:46:01 2022 rev:8 rq:955955 version:1.17.7 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-02-13 19:50:57.970200461 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1958/go1.17.changes 2022-02-21 17:46:32.603593014 +0100 @@ -1,0 +2,9 @@ +Fri Feb 18 02:10:17 UTC 2022 - Jeff Kowalczyk + +- Add missing .bin binary test data to packaging. + * Existing test data files added to packaging with mode 644: +src/compress/bzip2/testdata/pass-random2.bin +src/compress/bzip2/testdata/pass-random1.bin +src/debug/dwarf/testdata/line-gcc-win.bin + +--- Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.BJOKlY/_old 2022-02-21 17:46:33.199593192 +0100 +++ /var/tmp/diff_new_pack.BJOKlY/_new 2022-02-21 17:46:33.203593194 +0100 @@ -313,7 +313,7 @@ # source files for go install, godoc, etc install -d %{buildroot}%{_datadir}/go/%{go_api} -for ext in *.{go,c,h,s,S,py,syso}; do +for ext in *.{go,c,h,s,S,py,syso,bin}; do find src -name ${ext} -exec install -Dm644 \{\} %{buildroot}%{_datadir}/go/%{go_api}/\{\} \; done # executable bash scripts called by go tool, etc
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-02-13 19:50:37 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1956 (New) Package is "go1.17" Sun Feb 13 19:50:37 2022 rev:7 rq:953825 version:1.17.7 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2022-01-08 23:23:14.490213143 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1956/go1.17.changes 2022-02-13 19:50:57.970200461 +0100 @@ -1,0 +2,25 @@ +Thu Feb 10 23:46:55 UTC 2022 - Jeff Kowalczyk + +- go1.17.7 (released 2022-02-10) includes security fixes to the + crypto/elliptic, math/big packages and to the go command, as well + as bug fixes to the compiler, linker, runtime, the go command, + and the debug/macho, debug/pe, and net/http/httptest packages. + Refs boo#1190649 go1.17 release tracking + CVE-2022-23806 CVE-2022-23772 CVE-2022-23773 + * boo#1195838 go#50974 CVE-2022-23806 + * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements + * boo#1195835 go#50699 CVE-2022-23772 + * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash + * boo#1195834 go#35671 CVE-2022-23773 + * go#50687 cmd/go: do not treat branches with semantic-version names as releases + * go#50942 cmd/asm: "compile: loop" compiler bug? + * go#50867 cmd/compile: incorrect use of CMN on arm64 + * go#50812 cmd/go: remove bitbucket VCS probing + * go#50781 runtime: incorrect frame information in traceback traversal may hang the process. + * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error + * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg + * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch + * go#50297 cmd/link: does not set section type of .init_array correctly + * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package + +--- Old: go1.17.6.src.tar.gz New: go1.17.7.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.37bFoo/_old 2022-02-13 19:50:59.594204787 +0100 +++ /var/tmp/diff_new_pack.37bFoo/_new 2022-02-13 19:50:59.598204799 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.6 +Version:1.17.7 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.6.src.tar.gz -> go1.17.7.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.6.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1956/go1.17.7.src.tar.gz differ: char 31, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-01-08 23:23:07 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1892 (New) Package is "go1.17" Sat Jan 8 23:23:07 2022 rev:6 rq:944562 version:1.17.6 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2021-12-12 21:27:18.724330971 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1892/go1.17.changes 2022-01-08 23:23:14.490213143 +0100 @@ -1,0 +2,14 @@ +Thu Jan 6 20:38:08 UTC 2022 - Jeff Kowalczyk + +- go1.17.6 (released 2022-01-06) includes fixes to the compiler, + linker, runtime, and the crypto/x509, net/http, and reflect + packages. + Refs boo#1190649 go1.17 release tracking + * go#50165 crypto/x509: error parsing large ASN.1 identifiers + * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey + * go#49961 reflect: segmentation violation while using html/template + * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space. + * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem + * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14 + +--- Old: go1.17.5.src.tar.gz New: go1.17.6.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.lAfQpK/_old 2022-01-08 23:23:17.174215335 +0100 +++ /var/tmp/diff_new_pack.lAfQpK/_new 2022-01-08 23:23:17.178215338 +0100 @@ -1,7 +1,7 @@ # # spec file for package go1.17 # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.5 +Version:1.17.6 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.5.src.tar.gz -> go1.17.6.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.5.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1892/go1.17.6.src.tar.gz differ: char 143, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2021-12-12 21:27:07 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.2520 (New) Package is "go1.17" Sun Dec 12 21:27:07 2021 rev:5 rq:938755 version:1.17.5 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2021-12-06 23:59:14.356594731 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.2520/go1.17.changes 2021-12-12 21:27:18.724330971 +0100 @@ -1,0 +2,12 @@ +Thu Dec 9 17:31:00 UTC 2021 - Jeff Kowalczyk + +- go1.17.5 (released 2021-12-09) includes security fixes to the + syscall and net/http packages. + Refs boo#1190649 go1.17 release tracking + CVE-2021-44716 CVE-2021-44717 + * boo#1193598 go#50057 CVE-2021-44717 + * go#50067 syscall: don???t close fd 0 on ForkExec error + * boo#1193597 go#50058 CVE-2021-44716 + * go#50065 net/http: limit growth of header canonicalization cache + +--- Old: go1.17.4.src.tar.gz New: go1.17.5.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.YcW0tm/_old 2021-12-12 21:27:19.276331298 +0100 +++ /var/tmp/diff_new_pack.YcW0tm/_new 2021-12-12 21:27:19.280331300 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.4 +Version:1.17.5 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.4.src.tar.gz -> go1.17.5.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.4.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.2520/go1.17.5.src.tar.gz differ: char 17, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2021-12-06 23:59:06 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.31177 (New) Package is "go1.17" Mon Dec 6 23:59:06 2021 rev:4 rq:935322 version:1.17.4 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2021-11-06 18:17:08.512856945 +0100 +++ /work/SRC/openSUSE:Factory/.go1.17.new.31177/go1.17.changes 2021-12-06 23:59:14.356594731 +0100 @@ -1,0 +2,24 @@ +Fri Dec 3 02:15:02 UTC 2021 - Jeff Kowalczyk + +- go1.17.4 (released 2021-12-02) includes fixes to the compiler, + linker, runtime, and the go/types, net/http, and time packages. + Refs boo#1190649 go1.17 release tracking + * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody + * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0 + * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires + * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess + * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0 + * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05 + * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3 + * go#49568 net/http: server responds with Transfer-Encoding: identity + * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections + * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression) + * go#49511 cmd/compile: init info of OAS node in a select case is being dropped + * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64 + * go#49407 time: ParseInLocation error + * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem + * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures) + * go#49129 cmd/compile: internal compiler error: can't find source for b12->b4: v31 = MOVBload v14 v1 : DX + * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type + +--- Old: go1.17.3.src.tar.gz New: go1.17.4.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.tf7JC9/_old 2021-12-06 23:59:15.132591987 +0100 +++ /var/tmp/diff_new_pack.tf7JC9/_new 2021-12-06 23:59:15.136591973 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.3 +Version:1.17.4 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.3.src.tar.gz -> go1.17.4.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.3.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.31177/go1.17.4.src.tar.gz differ: char 143, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2021-11-06 18:15:09 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1890 (New) Package is "go1.17" Sat Nov 6 18:15:09 2021 rev:3 rq:929550 version:1.17.3 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2021-10-11 16:48:49.094187044 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1890/go1.17.changes 2021-11-06 18:17:08.512856945 +0100 @@ -1,0 +2,24 @@ +Thu Nov 4 21:23:39 UTC 2021 - Jeff Kowalczyk + +- go1.17.3 (released 2021-11-04) includes security fixes to the + archive/zip and debug/macho packages, as well as bug fixes to the + compiler, linker, runtime, the go command, the misc/wasm + directory, and to the net/http and syscall packages. + Refs boo#1190649 go1.17 release tracking + CVE-2021-41771 CVE-2021-41772 + * boo#1192377 go#48990 CVE-2021-41771 + * go#48992 debug/macho: invalid dynamic symbol table command can cause panic + * boo#1192378 go#48085 CVE-2021-41772 + * go#48252 archive/zip: Reader.Open panics on empty string + * go#49199 cmd/go: go list all breaks in //go:build-only repos + * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables + * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime + * go#49077 x/net/http2: backport critical fixes + * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms + * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time + * go#48650 x/net/http2: pool deadlock + * go#48479 cmd/compile: 64 bits shifts on arm get wrong results + * go#48475 cmd/compile: incorrect arm/arm64 simplification rules + * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows + +--- Old: go1.17.2.src.tar.gz New: go1.17.3.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.NXAUSh/_old 2021-11-06 18:17:09.480857446 +0100 +++ /var/tmp/diff_new_pack.NXAUSh/_new 2021-11-06 18:17:09.480857446 +0100 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.2 +Version:1.17.3 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.2.src.tar.gz -> go1.17.3.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.2.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1890/go1.17.3.src.tar.gz differ: char 17, line 1
commit go1.17 for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2021-10-11 16:48:40 Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.2443 (New) Package is "go1.17" Mon Oct 11 16:48:40 2021 rev:2 rq:924126 version:1.17.2 Changes: --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes2021-09-20 23:36:05.259391093 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.2443/go1.17.changes 2021-10-11 16:48:49.094187044 +0200 @@ -1,0 +2,17 @@ +Fri Oct 8 00:41:43 UTC 2021 - Jeff Kowalczyk + +- go1.17.2 (released 2021-10-07) includes a security fix to the + linker and misc/wasm directory, as well as bug fixes to the + compiler, the runtime, the go command, and to the time and + text/template packages. + Refs boo#1190649 go1.17 release tracking + CVE-2021-38297 + * boo#1191468 go#48797 CVE-2021-38297 + * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data + * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer + * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method? + * go#48177 time: output does not respect comma as millisecond separator + * go#47859 time: timer reset sometimes ignored, causing delayed ticks + * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part + +--- Old: go1.17.1.src.tar.gz New: go1.17.2.src.tar.gz Other differences: -- ++ go1.17.spec ++ --- /var/tmp/diff_new_pack.7HmdEj/_old 2021-10-11 16:48:49.662187946 +0200 +++ /var/tmp/diff_new_pack.7HmdEj/_new 2021-10-11 16:48:49.666187952 +0200 @@ -135,7 +135,7 @@ %endif Name: go1.17 -Version:1.17.1 +Version:1.17.2 Release:0 Summary:A compiled, garbage-collected, concurrent programming language License:BSD-3-Clause ++ go1.17.1.src.tar.gz -> go1.17.2.src.tar.gz ++ /work/SRC/openSUSE:Factory/go1.17/go1.17.1.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.2443/go1.17.2.src.tar.gz differ: char 17, line 1