Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.25 for openSUSE:Factory checked in at 2026-03-08 17:25:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.25 (Old) and /work/SRC/openSUSE:Factory/.go1.25.new.8177 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.25" Sun Mar 8 17:25:59 2026 rev:15 rq:1337166 version:1.25.8 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.25/go1.25.changes 2026-02-10 21:12:01.526564659 +0100 +++ /work/SRC/openSUSE:Factory/.go1.25.new.8177/go1.25.changes 2026-03-08 17:26:26.529715072 +0100 @@ -1,0 +2,17 @@ +Fri Mar 6 00:26:43 UTC 2026 - Jeff Kowalczyk <[email protected]> + +- go1.25.8 (released 2026-03-05) includes security fixes to the + html/template, net/url, and os packages, as well as bug fixes to + the go command, the compiler, and the os package. + Refs boo#1244485 go1.25 release tracking + CVE-2026-25679 CVE-2026-27142 CVE-2026-27139 + * go#77969 go#77578 security: fix CVE-2026-25679 net/url: reject IPv6 literal not at start of host + * go#77971 go#77954 security: fix CVE-2026-27142 html/template: URLs in meta content attribute actions are not escaped + * go#77833 go#77827 security: fix CVE-2026-27139 os: FileInfo can escape from a Root + * go#77253 cmd/compile: miscompile of global array initialization + * go#77406 os: Go 1.25.x regression on RemoveAll for windows + * go#77413 runtime: netpollinit() incorrectly prints the error from linux.Eventfd + * go#77438 cmd/go: CGO compilation fails after upgrading from Go 1.25.5 to 1.25.6 due to --define-variable flag in pkg-config + * go#77531 net/smtp: expiry date of localhostCert for testing is too short + +------------------------------------------------------------------- Old: ---- go1.25.7.src.tar.gz New: ---- go1.25.8.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.25.spec ++++++ --- /var/tmp/diff_new_pack.FsF4XG/_old 2026-03-08 17:26:27.273745630 +0100 +++ /var/tmp/diff_new_pack.FsF4XG/_new 2026-03-08 17:26:27.273745630 +0100 @@ -107,7 +107,7 @@ %endif Name: go1.25 -Version: 1.25.7 +Version: 1.25.8 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.25.7.src.tar.gz -> go1.25.8.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.25/go1.25.7.src.tar.gz /work/SRC/openSUSE:Factory/.go1.25.new.8177/go1.25.8.src.tar.gz differ: char 110, line 1
