Hello community,
here is the log from the commit of package go1.8 for openSUSE:Factory checked
in at 2017-10-13 14:19:19
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/go1.8 (Old)
and /work/SRC/openSUSE:Factory/.go1.8.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.8"
Fri Oct 13 14:19:19 2017 rev:2 rq:533646 version:1.8.4
Changes:
--------
--- /work/SRC/openSUSE:Factory/go1.8/go1.8.changes 2017-10-06
11:04:58.403523259 +0200
+++ /work/SRC/openSUSE:Factory/.go1.8.new/go1.8.changes 2017-10-13
14:19:21.279609822 +0200
@@ -6,3 +6,12 @@
- go1.8.4 (released 2017/10/04) includes two security fixes. It contains the
- same fixes as Go 1.9.1 and was released at the same time. See the Go 1.8.4
- milestone on our issue tracker for details.
+ go1.8.4 (released 2017/10/04) includes two security fixes. It
+ contains the same fixes as Go 1.9.1 and was released at the same
+ time. See the Go 1.8.4 milestone on our issue tracker for
+ details.
+
+ Fixes included:
+
+ * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
+ servers (CVE-2017-15042, bsc#1062087)
+
+ * cmd/go: arbitrary code execution during “go get” or “go get -d”
+ (CVE-2017-15041, bsc#1062085)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ go1.8.spec ++++++
--- /var/tmp/diff_new_pack.hKx1lD/_old 2017-10-13 14:19:22.135572188 +0200
+++ /var/tmp/diff_new_pack.hKx1lD/_new 2017-10-13 14:19:22.139572012 +0200
@@ -1,5 +1,5 @@
#
-# spec file for package go
+# spec file for package go1.8
#
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
@@ -115,7 +115,7 @@
Patch10: runtime-bump-MaxGomaxprocs.patch
# PATCH-FIX-UPSTREAM (compiler-rt): Fix sanitizer build against latest glibc
Patch100: fix-sanitizer-build-against-latest-glibc.patch
-BuildRoot: %{_tmppath}/%{_name}-%{version}-build
+BuildRoot: %{_tmppath}/%{name}-%{version}-build
# boostrap
%if %{with_gccgo}
%ifnarch s390 s390x
