Hello community,
here is the log from the commit of package go1.11 for openSUSE:Leap:15.2
checked in at 2020-04-14 14:20:12
Comparing /work/SRC/openSUSE:Leap:15.2/go1.11 (Old)
and /work/SRC/openSUSE:Leap:15.2/.go1.11.new.3248 (New)
Package is "go1.11"
Tue Apr 14 14:20:12 2020 rev:5 rq:791647 version:1.11.13
Changes:
--- /work/SRC/openSUSE:Leap:15.2/go1.11/go1.11.changes 2020-01-15
15:05:41.537912442 +0100
+++ /work/SRC/openSUSE:Leap:15.2/.go1.11.new.3248/go1.11.changes
2020-04-14 14:20:18.713244519 +0200
@@ -1,0 +2,129 @@
+Mon Mar 16 08:50:35 UTC 2020 - Guillaume GARDET
+
+- %arm requires binutils-gold to build with go1.4 (bsc#1167874)
+
+---
+Thu Nov 28 12:37:35 UTC 2019 - Guillaume GARDET
+
+- Make use of gcc9-go for Tumbleweed since gcc8 has been dropped
+- Drop gcc8-go.patch and add gcc9-go.patch
+
+---
+Mon Oct 21 17:28:27 UTC 2019 - Stefan Brüns
+
+- Fix broken go_api evaluation (1.11 < 1.5, when evaluated as floats),
+ let RPM evaluate the expression, drop no longer required bc.
+- Own the gdbinit.d directory, avoid the build dependency on gdb.
+
+---
+Tue Aug 13 21:06:30 UTC 2019 - Jeff Kowalczyk
+
+- go1.11.13 (released 2019/08/13) includes security fixes to the
+ net/http and net/url packages addressing CVEs:
+ CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
+ Refs boo#1141688.
+ * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames
results in unbounded memory growth
+ * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable
to a reset flood, potentially leading to a denial of service
+ * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to
authorization bypass
+ * go#33632 net/url: URL.Parse Multiple Parsing Issues
+ * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2
implementation
+
+---
+Wed Jul 10 19:51:45 UTC 2019 - Jeff Kowalczyk
+
+- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
+ the linker.
+ Refs boo#1141688.
+ * go#32711 cmd/compile: wrong calculation result for bit operation
+that's inlined and has all constant shifts in rewrite rules
+ * go#32696 debug/dwarf: cgo produces malformed DWARF data
+ * go#32582 cmd/compile: `switch` statement on a custom `int32` type
+with negative values behaves differently in two consecutive calls
+
+---
+Tue Jul 9 10:48:17 UTC 2019 - Martin Liška
+
+- Set NO_BRP_AR in order to workaround issues when ar is used for
+ a Go ELF file.
+
+---
+Tue Jun 18 20:02:09 UTC 2019 - Jeff Kowalczyk
+
+- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
+ shortcut the build queues by allowing usage of systemd-mini.
+ Originally from Dominique Leuenberger
+
+---
+Mon Jun 17 20:43:45 UTC 2019 - Jeff Kowalczyk
+
+- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
+ Refs boo#1141688.
+ * go#32366 net/http: make Transport ignore 408 timeout messages from server
+ * go#32281 crypto/x509: macos 10.14 SIGSEGV in
crypto/x509._Cfunc_FetchPEMRoots
+ * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
+ * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the
-insecure flag is not set
+
+---
+Tue May 7 14:54:06 UTC 2019 - Jeff Kowalczyk
+
+- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
+ the linker.
+ Refs boo#1141688.
+ * go#31195 cmd/go: pseudoversions can refer to external commits
+ * go#30989 runtime: dll injection vulnerabilities on Windows
+
+---
+Mon Apr 15 07:14:17 UTC 2019 - Jeff Kowalczyk
+
+- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
+ releases on older versions of GNU/Linux led to failures when linking programs
+ that used cgo. Only Linux users who hit this issue need to update.
+ Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
+ upstream without its intended fix. It is identical to go1.11.7, except for
+ its version number. The intended fix is in go1.11.9. go1.11.8 was never
+ packaged for SUSE and openSUSE.
+ Refs boo#1141688.
+ * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in
go1.11.7
+
+---
+Sat Apr 6 06:30:51 UTC 2019 - Jeff Kowalczyk
+
+- g
