Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.23 for openSUSE:Factory checked in at 2025-03-06 14:48:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.23 (Old) and /work/SRC/openSUSE:Factory/.go1.23.new.19136 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.23" Thu Mar 6 14:48:18 2025 rev:10 rq:1250291 version:1.23.7 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.23/go1.23.changes 2025-02-07 22:58:16.189020544 +0100 +++ /work/SRC/openSUSE:Factory/.go1.23.new.19136/go1.23.changes 2025-03-06 14:48:50.209711641 +0100 @@ -1,0 +2,17 @@ +Tue Mar 4 19:14:49 UTC 2025 - Jeff Kowalczyk <[email protected]> + +- go1.23.7 (released 2025-03-04) includes security fixes to the + net/http, x/net/proxy, and x/net/http/httpproxy packages, as well + as bug fixes to the compiler, the runtime and the os and reflect + packages. + Refs boo#1229122 go1.23 release tracking + CVE-2025-22870 + * go#71985 go#71984 boo#1238572 security: fix CVE-2025-22870 net/http, x/net/proxy, x/net/http/httpproxy: proxy bypass using IPv6 zone IDs + * go#71727 runtime: usleep computes wrong tv_nsec on s390x + * go#71839 runtime: recover added in range-over-func loop body doesn't stop panic propagation / segfaults printing error + * go#71848 os: spurious SIGCHILD on running child process + * go#71875 reflect: Value.Seq panicking on functional iterator methods + * go#71915 reflect: Value.Seq iteration value types not matching the type of given int types + * go#71962 runtime/cgo: does not build with -Wdeclaration-after-statement + +------------------------------------------------------------------- Old: ---- go1.23.6.src.tar.gz New: ---- go1.23.7.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.23.spec ++++++ --- /var/tmp/diff_new_pack.t83ioD/_old 2025-03-06 14:48:52.885823866 +0100 +++ /var/tmp/diff_new_pack.t83ioD/_new 2025-03-06 14:48:52.901824537 +0100 @@ -122,7 +122,7 @@ %endif Name: go1.23 -Version: 1.23.6 +Version: 1.23.7 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.23.6.src.tar.gz -> go1.23.7.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.23/go1.23.6.src.tar.gz /work/SRC/openSUSE:Factory/.go1.23.new.19136/go1.23.7.src.tar.gz differ: char 17, line 1
