Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.20 for openSUSE:Factory checked in at 2023-03-08 14:53:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.20 (Old) and /work/SRC/openSUSE:Factory/.go1.20.new.31432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.20" Wed Mar 8 14:53:38 2023 rev:2 rq:1070083 version:1.20.2 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.20/go1.20.changes 2023-02-17 16:46:06.111233250 +0100 +++ /work/SRC/openSUSE:Factory/.go1.20.new.31432/go1.20.changes 2023-03-08 14:53:39.595031300 +0100 @@ -1,0 +2,27 @@ +Tue Mar 7 18:03:10 UTC 2023 - Jeff Kowalczyk <[email protected]> + +- go1.20.2 (released 2023-03-07) includes a security fix to the + crypto/elliptic package, as well as bug fixes to the compiler, + the covdata command, the linker, the runtime, and the + crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages. + Refs boo#1206346 go1.20 release tracking + CVE-2023-24532 + * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results + * go#58427 cmd/covdata: short read on string table when merging coverage counters + * go#58442 runtime: some linkname signatures do not match + * go#58444 cmd/compile: inline static init cause compile time error + * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry + * go#58498 crypto/ecdh: ECDH method doesn't check curve + * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy' + * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape + * go#58531 runtime: endless traceback when panic in generics funtion + * go#58536 runtime: long latency of sweep assists + * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20 + * go#58627 os: cmd/go gets error "copy_file_range: function not implemented" + * go#58717 net: TestTCPSelfConnect failures due to unexpected connections + * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows + * go#58776 cmd/compile: ICE on method value involving imported anonymous interface + * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey + * go#58811 crypto/x509: TestSystemVerify consistently failing + +------------------------------------------------------------------- Old: ---- go1.20.1.src.tar.gz New: ---- go1.20.2.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.20.spec ++++++ --- /var/tmp/diff_new_pack.OEQ60O/_old 2023-03-08 14:53:40.183034502 +0100 +++ /var/tmp/diff_new_pack.OEQ60O/_new 2023-03-08 14:53:40.187034525 +0100 @@ -134,7 +134,7 @@ %endif Name: go1.20 -Version: 1.20.1 +Version: 1.20.2 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause ++++++ go1.20.1.src.tar.gz -> go1.20.2.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.20/go1.20.1.src.tar.gz /work/SRC/openSUSE:Factory/.go1.20.new.31432/go1.20.2.src.tar.gz differ: char 120, line 1
