Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.26 for openSUSE:Factory checked in at 2026-03-06 18:20:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.26 (Old) and /work/SRC/openSUSE:Factory/.go1.26.new.561 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.26" Fri Mar 6 18:20:27 2026 rev:6 rq:1337167 version:1.26.1 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.26/go1.26.changes 2026-02-13 12:45:45.095806086 +0100 +++ /work/SRC/openSUSE:Factory/.go1.26.new.561/go1.26.changes 2026-03-06 18:21:18.810924569 +0100 @@ -1,0 +2,36 @@ +Fri Mar 6 00:26:39 UTC 2026 - Jeff Kowalczyk <[email protected]> + +- go1.26.1 (released 2026-03-05) includes security fixes to the + crypto/x509, html/template, net/url, and os packages, as well as + bug fixes to the go command, the go fix command, the compiler, + and the os and reflect packages. + Refs boo#1255111 go1.26 release tracking + CVE-2026-25679 CVE-2026-27142 CVE-2026-27137 CVE-2026-27138 CVE-2026-27139 + * go#77970 go#77578 boo#1259264 security: fix CVE-2026-25679 net/url: reject IPv6 literal not at start of host + * go#77972 go#77954 boo#1259265 security: fix CVE-2026-27142 html/template: URLs in meta content attribute actions are not escaped + * go#77973 go#77952 boo#1259266 security: fix CVE-2026-27137 crypto/x509: incorrect enforcement of email constraints + * go#77974 go#77953 boo#1259267 security: fix CVE-2026-27138 crypto/x509: panic in name constraint checking for malformed certificates + * go#77834 go#77827 boo#1259268 security: fix CVE-2026-27139 os: FileInfo can escape from a Root + * go#77252 cmd/compile: miscompile of global array initialization + * go#77407 os: Go 1.25.x regression on RemoveAll for windows + * go#77474 cmd/go: CGO compilation fails after upgrading from Go 1.25.5 to 1.25.6 due to --define-variable flag in pkg-config + * go#77529 cmd/fix, x/tools/go/analysis/passes/modernize: stringscut: OOB panic in indexArgValid analyzing "buf.Bytes()" call + * go#77532 net/smtp: expiry date of localhostCert for testing is too short + * go#77536 cmd/compile: internal compiler error: 'main.func1': not lowered: v15, Load STRUCT PTR SSA + * go#77618 strings: HasSuffix doesn't work correctly for multibyte runes in go 1.26 + * go#77623 cmd/compile: internal compiler error on : "tried to free an already free register" with generic function and type >= 192 bytes + * go#77624 cmd/fix, x/tools/go/analysis/passes/modernize: stringsbuilder breaks code when combining two strings.Builders + * go#77680 cmd/link: TestFlagW/-w_-linkmode=external fails on illumos + * go#77766 cmd/fix,x/tools/go/analysis/passes/modernize: rangeint uses target platform's type in the range expression, breaking other platforms + * go#77780 reflect: breaking change for reflect.Value.Interface behaviour + * go#77786 cmd/compile: rewriteFixedLoad does not properly sign extend AuxInt + * go#77803 cmd/fix,x/tools/go/analysis/passes/modernize: reflect.TypeOf(nil) transformed into reflect.TypeFor[untyped nil]() + * go#77804 cmd/fix,x/tools/go/analysis/passes/modernize: minmax breaks select statements + * go#77805 cmd/fix, x/tools/go/analysis/passes/modernize: waitgroup leads to a compilation error + * go#77807 cmd/fix,x/tools/go/analysis/passes/modernize: stringsbuilder ignores variables if they are used multiple times + * go#77849 cmd/fix,x/tools/go/analysis/passes/modernize: stringscut rewrite changes behavior + * go#77860 cmd/go: change go mod init default go directive back to 1.N + * go#77899 cmd/fix, x/tools/go/analysis/passes/modernize: bad rangeint rewriting + * go#77904 x/tools/go/analysis/passes/modernize: stringsbuilder breaks code when GenDecl is a block declaration + +------------------------------------------------------------------- Old: ---- go1.26.0.src.tar.gz New: ---- go1.26.1.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.26.spec ++++++ --- /var/tmp/diff_new_pack.175AGT/_old 2026-03-06 18:21:19.726962800 +0100 +++ /var/tmp/diff_new_pack.175AGT/_new 2026-03-06 18:21:19.730962967 +0100 @@ -111,7 +111,7 @@ %endif Name: go1.26 -Version: 1.26.0 +Version: 1.26.1 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.26.0.src.tar.gz -> go1.26.1.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.26/go1.26.0.src.tar.gz /work/SRC/openSUSE:Factory/.go1.26.new.561/go1.26.1.src.tar.gz differ: char 17, line 1
