Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package go1.21 for openSUSE:Factory checked in at 2023-09-10 13:09:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.21 (Old) and /work/SRC/openSUSE:Factory/.go1.21.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.21" Sun Sep 10 13:09:27 2023 rev:5 rq:1109622 version:1.21.1 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.21/go1.21.changes 2023-08-09 17:25:56.301636187 +0200 +++ /work/SRC/openSUSE:Factory/.go1.21.new.1766/go1.21.changes 2023-09-10 13:09:44.389503123 +0200 @@ -1,0 +2,60 @@ +Wed Sep 6 15:08:50 UTC 2023 - Jeff Kowalczyk <jkowalc...@suse.com> + +- go1.21.1 (released 2023-09-06) includes four security fixes to + the cmd/go, crypto/tls, and html/template packages, as well as + bug fixes to the compiler, the go command, the linker, the + runtime, and the context, crypto/tls, encoding/gob, encoding/xml, + go/types, net/http, os, and path/filepath packages. + Refs boo#1212475 go1.21 release tracking + CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322 + * go#62290 go#62266 boo#1215087 security: fix CVE-2023-39321 CVE-2023-39322 crypto/tls: panic when processing partial post-handshake message in QUICConn.HandleData + * go#62394 go#62198 boo#1215086 security: fix CVE-2023-39320 cmd/go: go.mod toolchain directive allows arbitrary execution + * go#62396 go#62196 boo#1215084 security: fix CVE-2023-39318 html/template: improper handling of HTML-like comments within script contexts + * go#62398 go#62197 boo#1215085 security: fix CVE-2023-39319 html/template: improper handling of special tags within script contexts + * go#61743 go/types: interface.Complete panics for interfaces with duplicate methods + * go#61781 cmd/compile: internal compiler error: 'f': value .autotmp_1 (nil) incorrectly live at entry + * go#61818 cmd/go: panic: runtime error: index out of range [-1] in collectDepsErrors + * go#61821 runtime/internal/wasitest: TestTCPEcho is racy + * go#61868 path/filepath: Clean on some invalid Windows paths can lose .. components + * go#61904 net/http: go 1.20.6 host validation breaks setting Host to a unix socket address + * go#61905 cmd/go: go get/mod tidy panics with internal error: net token acquired but not released + * go#61909 cmd/compile: internal compiler error: missed typecheck + * go#61910 os: ReadDir fails on file systems without File ID support on Windows + * go#61927 cmd/distpack: release archives don't include directory members + * go#61930 spec, go/types, types2: restore Go 1.20 unification when compiling for Go 1.20 + * go#61932 go/types, types2: index out of range panic in Checker.arguments + * go#61958 cmd/compile: write barrier code is sometimes preemptible when compiled with -N + * go#61959 go/types, types2: panic: infinite recursion in unification with go1.21.0 + * go#61964 os: ReadDir(\\.\pipe\) fails with go1.21 on Windows + * go#61967 crypto/tls: add GODEBUG to control max RSA key size + * go#61987 runtime: simple programs crash on linux/386 with go1.21 when build with -gcflags='all=-N -l' + * go#62019 runtime: execution halts with goroutines stuck in runtime.gopark (protocol error E08 during memory read for packet) + * go#62046 runtime/trace: segfault in runtime.fpTracebackPCs during deferred call after recovering from panic + * go#62051 encoding/xml: incompatible changes in the Go 1.21.0 + * go#62057 cmd/compile: internal compiler error: 'F': func F, startMem[b1] has different values + * go#62071 cmd/api: make non-importable + * go#62140 cmd/link: slice bounds out of range + * go#62143 hash/crc32: panic on arm64 with go1.21.0 when indexing slice + * go#62144 cmd/go: locating GOROOT fails when the go command is run from the cross-compiled bin subdirectory + * go#62154 encoding/gob: panic decoding into local type, received remote type + * go#62189 context: misuse of sync.Cond in ExampleAfterFunc_cond + * go#62204 maps: segfault in Clone + * go#62205 cmd/compile: backward incompatible change in Go 1.21 type inference with channels + * go#62222 cmd/go: 'go test -o' may fail with ETXTBSY when running the compiled test + * go#62328 net/http: http client regression building with js/wasm and running on Chrome: net::ERR_H2_OR_QUIC_REQUIRED + * go#62329 runtime: MADV_HUGEPAGE causes stalls when allocating memory + +------------------------------------------------------------------- +Tue Sep 5 19:12:05 UTC 2023 - Jeff Kowalczyk <jkowalc...@suse.com> + +- Add missing directory pprof html asset directory to package. + Refs boo#1215090 + * src/cmd/vendor/github.com/google/pprof/internal/driver/html/ + dir containing html assets is present in upstream Go + distribution but missing from SUSE go1.x packages + * Go programs importing runtime/pprof may fail with error: + /usr/lib64/go/1.21/src/cmd/vendor/github.com/google/pprof/internal/driver/webhtml.go + pattern html: no matching files found + * Reformat adjacent commment in spec file + +------------------------------------------------------------------- Old: ---- go1.21.0.src.tar.gz New: ---- go1.21.1.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.21.spec ++++++ --- /var/tmp/diff_new_pack.UPx09V/_old 2023-09-10 13:09:46.689585298 +0200 +++ /var/tmp/diff_new_pack.UPx09V/_new 2023-09-10 13:09:46.693585441 +0200 @@ -126,7 +126,7 @@ %endif Name: go1.21 -Version: 1.21.0 +Version: 1.21.1 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause @@ -367,14 +367,14 @@ done # executable bash scripts called by go tool, etc find src -name "*.bash" -exec install -Dm655 \{\} %{buildroot}%{_datadir}/go/%{go_label}/\{\} \; -# # Trace viewer html and javascript files moved from misc/trace in -# # previous versions to src/cmd/trace/static in go1.19. -# # static contains pprof trace viewer html javascript and markdown -# echo "PWD:" `pwd` -# echo "GOROOT:" $GOROOT -# mkdir -v -p $GOROOT/src/cmd/trace/static +# Trace viewer html and javascript files moved from misc/trace in +# previous versions to src/cmd/trace/static in go1.19. +# static contains pprof trace viewer html javascript and markdown install -d %{buildroot}%{_datadir}/go/%{go_label}/src/cmd/trace/static install -Dm644 src/cmd/trace/static/* %{buildroot}%{_datadir}/go/%{go_label}/src/cmd/trace/static +# pprof viewer html templates are needed for import runtime/pprof +install -d %{buildroot}%{_datadir}/go/%{go_label}/src/cmd/vendor/github.com/google/pprof/internal/driver/html +install -Dm644 src/cmd/vendor/github.com/google/pprof/internal/driver/html/* %{buildroot}%{_datadir}/go/%{go_label}/src/cmd/vendor/github.com/google/pprof/internal/driver/html mkdir -p $GOROOT/src for i in $(ls %{buildroot}/usr/share/go/%{go_label}/src);do ++++++ go1.21.0.src.tar.gz -> go1.21.1.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.21/go1.21.0.src.tar.gz /work/SRC/openSUSE:Factory/.go1.21.new.1766/go1.21.1.src.tar.gz differ: char 43, line 2