Hello community, here is the log from the commit of package go1.10 for openSUSE:Factory checked in at 2018-12-21 08:18:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/go1.10 (Old) and /work/SRC/openSUSE:Factory/.go1.10.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "go1.10" Fri Dec 21 08:18:37 2018 rev:5 rq:658900 version:1.10.7 Changes: -------- --- /work/SRC/openSUSE:Factory/go1.10/go1.10.changes 2018-12-10 12:25:58.202668892 +0100 +++ /work/SRC/openSUSE:Factory/.go1.10.new.28833/go1.10.changes 2018-12-21 08:18:40.581724001 +0100 @@ -1,0 +2,49 @@ +Sat Dec 15 12:45:31 UTC 2018 - Aleksa Sarai <[email protected]> + +- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching + between versions no longer break. This ends up removing the need for go.sh + entirely (because GOPATH is also set automatically). boo#1119634 + +------------------------------------------------------------------- +Sat Dec 15 06:01:39 UTC 2018 - Jeff Kowalczyk <[email protected]> + +- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in + Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706). + See the Go 1.10.7 milestone on upstream issue tracker for details. + https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved + * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...") + +------------------------------------------------------------------- +Thu Dec 13 23:26:59 UTC 2018 - Jeff Kowalczyk <[email protected]> + +- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to + the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone + on upstream tracker for details: + https://github.com/golang/go/issues?q=milestone%3AGo1.10.6 + * bsc#1118897 CVE-2018-16873 + go#29230 cmd/go: remote command execution during "go get -u" + * bsc#1118898 CVE-2018-16874 + go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths + * bsc#1118899 CVE-2018-16875 + go#29233 crypto/x509: CPU denial of service + * Upstream is aware of a functionality regression in "go get" when + executed in GOPATH mode on an import path pattern containing "..." + (e.g., "go get github.com/golang/pkg/..."), when downloading + packages not already present in the GOPATH workspace. This is go#29241 + and will be resolved in the next minor patch release go-1.10.6 + +------------------------------------------------------------------- +Mon Dec 10 19:07:53 UTC 2018 - Jeff Kowalczyk <[email protected]> + +- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017 + * gccgo on ppc64le with default PIE enabled fails with: + error while loading shared libraries: + R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range + * linuxppc-dev discussion: + "PIE binaries are no longer mapped below 4 GiB on ppc64le" + https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html + * Add for ppc64le only: #!BuildIgnore: gcc-PIE + * OBS environment defaults to PIE + * Upstream fix for go buildmode PIE desired, track upstream go#28531 + +------------------------------------------------------------------- Old: ---- go.sh go1.10.5.src.tar.gz New: ---- go1.10.7.src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ go1.10.spec ++++++ --- /var/tmp/diff_new_pack.x9Ftn8/_old 2018-12-21 08:18:41.397723238 +0100 +++ /var/tmp/diff_new_pack.x9Ftn8/_new 2018-12-21 08:18:41.401723234 +0100 @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # # nodebuginfo @@ -46,6 +46,17 @@ %define with_gccgo 1 %endif +# gccgo on ppc64le with default PIE enabled fails with: +# error while loading shared libraries: +# R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range +# track https://github.com/golang/go/issues/28531 +# linuxppc-dev discussion: +# "PIE binaries are no longer mapped below 4 GiB on ppc64le" +# https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html +%ifarch ppc64le +#!BuildIgnore: gcc-PIE +%endif + # By default we don't include tsan. It's only supported on amd64. %define tsan_arch x86_64 @@ -78,7 +89,7 @@ %endif Name: go1.10 -Version: 1.10.5 +Version: 1.10.7 Release: 0 Summary: A compiled, garbage-collected, concurrent programming language License: BSD-3-Clause @@ -86,7 +97,6 @@ Url: http://golang.org Source: http://golang.org/dl/go%{version}.src.tar.gz Source1: go-rpmlintrc -Source2: go.sh Source4: README.SUSE Source6: go.gdbinit # We have to compile TSAN ourselves. boo#1052528 @@ -267,8 +277,6 @@ %install export GOROOT="%{buildroot}%{_libdir}/go/%{go_api}" -install -Dm644 %{SOURCE2} $GOROOT/bin/profile.d/go.sh -sed -i "s/\$go_api/%{go_api}/" $GOROOT/bin/profile.d/go.sh # locations for third party libraries, see README-openSUSE for info about locations. install -d %{buildroot}%{_datadir}/go/%{go_api}/contrib @@ -315,10 +323,9 @@ mkdir -p %{buildroot}%{_bindir} mkdir -p %{buildroot}%{_sysconfdir}/profile.d mkdir -p %{buildroot}%{_sysconfdir}/gdbinit.d - touch %{buildroot}%{_sysconfdir}/alternatives/{go,gofmt,go.sh,go.gdb} + touch %{buildroot}%{_sysconfdir}/alternatives/{go,gofmt,go.gdb} ln -sf %{_sysconfdir}/alternatives/go %{buildroot}%{_bindir}/go ln -sf %{_sysconfdir}/alternatives/gofmt %{buildroot}%{_bindir}/gofmt - ln -sf %{_sysconfdir}/alternatives/go.sh %{buildroot}%{_sysconfdir}/profile.d/go.sh ln -sf %{_sysconfdir}/alternatives/go.gdb %{buildroot}%{_sysconfdir}/gdbinit.d/go.gdb # documentation and examples @@ -339,7 +346,6 @@ --install %{_bindir}/go go %{_libdir}/go/%{go_api}/bin/go 30 \ --slave %{_bindir}/gofmt gofmt %{_libdir}/go/%{go_api}/bin/gofmt \ --slave %{_sysconfdir}/gdbinit.d/go.gdb go.gdb %{_libdir}/go/%{go_api}/bin/gdbinit.d/go.gdb \ - --slave %{_sysconfdir}/profile.d/go.sh go.sh %{_libdir}/go/%{go_api}/bin/profile.d/go.sh %postun if [ $1 -eq 0 ] ; then @@ -354,11 +360,9 @@ %{_libdir}/go/%{go_api} %{_datadir}/go %{_datadir}/go/%{go_api} -%config %{_sysconfdir}/profile.d/go.sh %config %{_sysconfdir}/gdbinit.d/go.gdb %ghost %{_sysconfdir}/alternatives/go %ghost %{_sysconfdir}/alternatives/gofmt -%ghost %{_sysconfdir}/alternatives/go.sh %ghost %{_sysconfdir}/alternatives/go.gdb %dir %{_docdir}/go %dir %{_docdir}/go/%{go_api} ++++++ go1.10.5.src.tar.gz -> go1.10.7.src.tar.gz ++++++ /work/SRC/openSUSE:Factory/go1.10/go1.10.5.src.tar.gz /work/SRC/openSUSE:Factory/.go1.10.new.28833/go1.10.7.src.tar.gz differ: char 141, line 1
