Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.23 for openSUSE:Factory checked in at 2025-04-03 18:40:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.23 (Old) and /work/SRC/openSUSE:Factory/.go1.23.new.1907 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.23" Thu Apr 3 18:40:39 2025 rev:11 rq:1266334 version:1.23.8 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.23/go1.23.changes 2025-03-06 14:48:50.209711641 +0100 +++ /work/SRC/openSUSE:Factory/.go1.23.new.1907/go1.23.changes 2025-04-03 18:40:48.134186953 +0200 @@ -1,0 +2,13 @@ +Tue Apr 1 16:11:48 UTC 2025 - Jeff Kowalczyk <[email protected]> + +- go1.23.8 (released 2025-04-01) includes security fixes to the + net/http package, as well as bug fixes to the runtime and the go + command. + Refs boo#1229122 go1.23 release tracking + CVE-2025-22871 + * go#72010 go#71988 boo#1240550 security: fix CVE-2025-22871 net/http: reject bare LF in chunked encoding + * go#72114 runtime: process hangs for mips hardware + * go#72871 runtime: cgo callback on extra M treated as external code after nested cgo callback returns + * go#72937 internal/godebugs: winsymlink and winreadlinkvolume have incorrect defaults for Go 1.22 + +------------------------------------------------------------------- @@ -5,3 +18,2 @@ - net/http, x/net/proxy, and x/net/http/httpproxy packages, as well - as bug fixes to the compiler, the runtime and the os and reflect - packages. + net/http package, as well as bug fixes to cgo, the compiler, and + the reflect, runtime, and syscall packages. Old: ---- go1.23.7.src.tar.gz New: ---- go1.23.8.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.23.spec ++++++ --- /var/tmp/diff_new_pack.KeGaXa/_old 2025-04-03 18:40:50.402282001 +0200 +++ /var/tmp/diff_new_pack.KeGaXa/_new 2025-04-03 18:40:50.422282840 +0200 @@ -122,7 +122,7 @@ %endif Name: go1.23 -Version: 1.23.7 +Version: 1.23.8 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.23.7.src.tar.gz -> go1.23.8.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.23/go1.23.7.src.tar.gz /work/SRC/openSUSE:Factory/.go1.23.new.1907/go1.23.8.src.tar.gz differ: char 110, line 1
