Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.17 for openSUSE:Factory checked in at 2022-06-03 14:15:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.17 (Old) and /work/SRC/openSUSE:Factory/.go1.17.new.1548 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.17" Fri Jun 3 14:15:32 2022 rev:16 rq:980419 version:1.17.11 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.17/go1.17.changes 2022-05-12 22:58:17.156629692 +0200 +++ /work/SRC/openSUSE:Factory/.go1.17.new.1548/go1.17.changes 2022-06-03 14:15:46.453246929 +0200 @@ -1,0 +2,22 @@ +Wed Jun 1 17:51:26 UTC 2022 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.17.11 (released 2022-06-01) includes security fixes to the + crypto/rand, crypto/tls, os/exec, and path/filepath packages, as + well as bug fixes to the crypto/tls package. + Refs boo#1190649 go1.17 release tracking + CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804 + * boo#1200134 go#52561 CVE-2022-30634 + * go#52932 crypto/rand: Read hangs when passed buffer larger than 1<<32 - 1 + * boo#1200135 go#52814 CVE-2022-30629 + * go#52832 crypto/tls: randomly generate ticket_age_add + * boo#1200136 go#52574 CVE-2022-30580 + * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset + * boo#1200137 go#52476 CVE-2022-29804 + * go#52478 path/filepath: Clean(.\c:) returns c: on Windows + * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17 + * go#52826 runtime: TestGcSys is still flaky + * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12 + * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0" + * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11 + +------------------------------------------------------------------- Old: ---- go1.17.10.src.tar.gz New: ---- go1.17.11.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.17.spec ++++++ --- /var/tmp/diff_new_pack.PsRTX6/_old 2022-06-03 14:15:47.161247849 +0200 +++ /var/tmp/diff_new_pack.PsRTX6/_new 2022-06-03 14:15:47.161247849 +0200 @@ -145,7 +145,7 @@ %endif Name: go1.17 -Version: 1.17.10 +Version: 1.17.11 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.17.10.src.tar.gz -> go1.17.11.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.17/go1.17.10.src.tar.gz /work/SRC/openSUSE:Factory/.go1.17.new.1548/go1.17.11.src.tar.gz differ: char 19, line 1