Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.26 for openSUSE:Factory checked in at 2026-06-05 14:56:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.26 (Old) and /work/SRC/openSUSE:Factory/.go1.26.new.2375 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.26" Fri Jun 5 14:56:03 2026 rev:10 rq:1357053 version:1.26.4 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.26/go1.26.changes 2026-05-13 17:20:30.466209965 +0200 +++ /work/SRC/openSUSE:Factory/.go1.26.new.2375/go1.26.changes 2026-06-05 14:56:09.554031231 +0200 @@ -1,0 +2,17 @@ +Tue Jun 2 18:57:22 UTC 2026 - Jeff Kowalczyk <[email protected]> + +- go1.26.4 (released 2026-06-02) includes security fixes to the + crypto/x509, mime, and net/textproto packages, as well as bug + fixes to the compiler, the runtime, the go fix command, and the + crypto/fips140 package. + Refs boo#1255111 go1.26 release tracking + CVE-2026-42504 CVE-2026-42507 CVE-2026-27145 + * go#79230 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader + * go#79426 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors without any escaping + * go#79701 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once + * go#79191 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation + * go#79226 crypto/internal/fips140/drbg: backport CL 774221 to Go 1.26 + * go#79349 cmd/fix: x/tools/go/analysis/passes/modernize: slicescontains hoists needle expression, changing side effect count + * go#79686 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64 + +------------------------------------------------------------------- Old: ---- go1.26.3.src.tar.gz New: ---- go1.26.4.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.26.spec ++++++ --- /var/tmp/diff_new_pack.sM1MtR/_old 2026-06-05 14:56:12.210141077 +0200 +++ /var/tmp/diff_new_pack.sM1MtR/_new 2026-06-05 14:56:12.210141077 +0200 @@ -111,7 +111,7 @@ %endif Name: go1.26 -Version: 1.26.3 +Version: 1.26.4 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.26.3.src.tar.gz -> go1.26.4.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.26/go1.26.3.src.tar.gz /work/SRC/openSUSE:Factory/.go1.26.new.2375/go1.26.4.src.tar.gz differ: char 109, line 1
