Hello community, here is the log from the commit of package helm-mirror for openSUSE:Factory checked in at 2019-01-05 14:42:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/helm-mirror (Old) and /work/SRC/openSUSE:Factory/.helm-mirror.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "helm-mirror" Sat Jan 5 14:42:44 2019 rev:4 rq:662761 version:0.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/helm-mirror/helm-mirror.changes 2018-12-13 19:49:14.328639321 +0100 +++ /work/SRC/openSUSE:Factory/.helm-mirror.new.28833/helm-mirror.changes 2019-01-05 14:42:46.140459316 +0100 @@ -1,0 +2,11 @@ +Tue Dec 18 13:28:35 UTC 2018 - Vicente Zepeda <vzepeda...@suse.com> + +- Update go requirements to >= go1.11.3 to fix + * bsc#1118897 CVE-2018-16873 + go#29230 cmd/go: remote command execution during "go get -u" + * bsc#1118898 CVE-2018-16874 + go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths + * bsc#1118899 CVE-2018-16875 + go#29233 crypto/x509: CPU denial of service + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ helm-mirror.spec ++++++ --- /var/tmp/diff_new_pack.g2uRLG/_old 2019-01-05 14:42:46.864458701 +0100 +++ /var/tmp/diff_new_pack.g2uRLG/_new 2019-01-05 14:42:46.864458701 +0100 @@ -27,10 +27,10 @@ Group: System/Management Url: https://github.com/openSUSE/helm-mirror Source: %{name}-%{version}.tar.gz -BuildRequires: go >= 1.9.7 +BuildRequires: go >= 1.11.3 BuildRequires: go-go-md2man BuildRequires: golang-packaging -BuildRequires: golang(API) >= 1.9 +BuildRequires: golang(API) >= 1.11 Requires(post): %fillup_prereq BuildRoot: %{_tmppath}/%{name}-%{version}-build
